| Package | Affected versions | Patched versions |
|---|---|---|
| bugzilla | = 2.19.3= 2.20= 2.21= 2.21.1= 2.21.2 |
Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a partial URL in a form action that causes the user's browser to send the form data to another domain.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free