CVE-2018-5123

CVE-2018-5123 describes a CSRF vulnerability in Bugzilla's report.cgi that can let a third party extract confidential information from a bug entry accessible to the victim. Affected are Bugzilla releases prior to 4.4; CVSS2 base 6.8 (NETWORK, no auth, partial confidentiality/integrity/availabilit...