Bugzilla is prone to an information-disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected.

Updates are available. Please see the references for details.

• http://www.bugzilla.org
• http://www.bugzilla.org/security/3.0.10/
• http://www.securityfocus.com/bid/38025

---

Updated on 2015-03-25