Total vulnerabilities in the database
Template.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to discover the alias of a private bug by reading the (1) Depends On or (2) Blocks field of a related bug.
| Software | From | Fixed in |
|---|---|---|
| mozilla / bugzilla | 3.4.3 | 3.4.3.x |
| mozilla / bugzilla | 3.3.2 | 3.3.2.x |
| mozilla / bugzilla | 3.4.2 | 3.4.2.x |
| mozilla / bugzilla | 3.3.4 | 3.3.4.x |
| mozilla / bugzilla | 3.5.1 | 3.5.1.x |
| mozilla / bugzilla | 3.5 | 3.5.x |
| mozilla / bugzilla | 3.4.1 | 3.4.1.x |
| mozilla / bugzilla | 3.3.3 | 3.3.3.x |
| mozilla / bugzilla | 3.4 | 3.4.x |
| mozilla / bugzilla | 3.4-rc1 | 3.4-rc1.x |