CVE-2006-5454

CVE-2006-5454 affects Bugzilla: versions 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3. The vulnerability allows remote attackers to (1) obtain the description of arbitrary attachments by viewing an attachment in diff mode (attachment.cgi), and (2) rea...