CVE-2006-0916

Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a…

published February 28, 2006

CVSS
—
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a partial URL in a form action that causes the user's browser to send the form data to another domain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01203 · 68.0th percentile
Published
2006-02-28T11:00Z
EPSS history
Timeline
  • 28 FEB 11:00Z
    Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a…
    cvelistv5