Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2012-0465

EPSS 0.24% · P47
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2012-0465

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication requests with (1) different IP address strings in this header or (2) a long string in this header.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Bugzilla跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bugzilla是美国Mozilla基金会开发的一套开源的缺陷跟踪系统，它可管理软件开发中缺陷的提交（new）、修复（resolve）、关闭（close）等整个生命周期。 Bugzilla中存在跨站请求伪造漏洞，该漏洞源于应用程序允许用户借助HTTP请求，且在没有对这些请求执行正确有效性检查的情况下，执行某些操作。攻击者可利用该漏洞导致例如：通过欺骗登录的管理员去访问恶意网站，泄露某些关于私人漏洞报告的信息。以下版本中存在该漏洞：2.17.4至3.6.8版本，3.7.1至4.0.5版本和4.1.1至4.2
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2012-0465

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2012-0465

请登录查看更多情报信息。

Same Patch Batch · n/a · 2012-04-27 · 6 CVEs total

CVE-2012-0466Bugzilla跨站请求伪造漏洞
CVE-2012-0269JustSystems 缓冲区溢出漏洞
CVE-2012-1242JustSystems安全漏洞
CVE-2012-1244Android ‘NTT DOCOMO sp’ 安全漏洞
CVE-2012-1245OSQA ‘forum/utils/html.py’ 跨站脚本漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2012-0465

No comments yet

Leave a comment