4
CVE-2012-0448
- EPSS 1.01%
- Veröffentlicht 02.02.2012 18:55:01
- Zuletzt bearbeitet 16.06.2026 23:37:17
- Erkennungen
LoginBugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 does not reject non-ASCII characters in e-mail addresses of new user accounts, which makes it easier for remote authenticated users to spoof other user accounts by choosing a similar e-mail address.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.01% | 0.587 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://secunia.com/advisories/47814
http://www.bugzilla.org/security/3.4.13/
http://www.securitytracker.com/id?1026623
http://www.securityfocus.com/bid/51784
https://bugzilla.mozilla.org/show_bug.cgi?id=714472
https://exchange.xforce.ibmcloud.com/vulnerabilities/72877