CVE-2014-1517

CVE-2014-1517 describes a "login CSRF" vulnerability affecting Bugzilla versions 2.x, 3.x, and 4.x before 4.4.3, and 4.5.x before 4.5.3. This flaw allows a remote authenticated attacker to trick a victim into logging into the attacker's Bugzilla account, potentially leading to the disclosure of sensitive information if the victim then submits a vulnerability report. The vulnerability has a CVSS score of 4.0, indicating a low severity, with an attack vector over the network, low attack complexity, and a partial impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.