CVE-2013-0786

The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x and 4.0.x before 4.0.10 generates different error messages for…

published February 24, 2013

CVSS
—
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x and 4.0.x before 4.0.10 generates different error messages for invalid product queries depending on whether a product exists, which allows remote attackers to discover private product names by using debug mode for a query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01657 · 76.4th percentile
Published
2013-02-24T11:00Z
EPSS history
Timeline
  • 24 FEB 11:00Z
    The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x and 4.0.x before 4.0.10 generates different error messages for…
    cvelistv5