Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rqw-jw32-4q7h

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

EPSS

Процентиль: 18%
0.00057
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
больше 14 лет назад

Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

nvd
больше 14 лет назад

Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

debian
больше 14 лет назад

Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before ...

EPSS

Процентиль: 18%
0.00057
Низкий

Дефекты

CWE-200