CVE-2015-4499

CVE-2015-4499 is a vulnerability in Bugzilla versions 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1. It allows remote attackers to gain default privileges for arbitrary domain names during account registration by exploiting how long email addresses are handled. The vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness among threat actors.