Posted by LpSolit on Feb 01
Summary=======
Bugzilla is a Web-based bug-tracking system used by a large number of
software projects. The following security issues have been discovered
in Bugzilla:
* When a user creates a new account, Bugzilla doesn't correctly
reject email addresses containing non-ASCII characters, which
could be used to impersonate another user account.
* A CSRF vulnerability in the implementation of the JSON-RPC API
could be used to make...