Bugzilla.Mozilla.org is showing the employees and bug reporters email address and their activity in public
Categories
(bugzilla.mozilla.org :: Administration, defect)
Tracking
()
People
(Reporter: devand27, Unassigned)
References
Details
User Agent: Mozilla/5.0 (Linux; Android 6.0; Aura Note 4G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36
Steps to reproduce:
Anyone can able to see the bug reporters and employees email address and their activity in bugzilla.Mozilla.org. This is a security and privacy issue.
Actual results:
While searching bug reports, i found that Bugzilla.Mozilla.org is showing the employees and bug reporters email address and their activity in public
Expected results:
Mozilla should not show this in public
|
Reporter | |
Comment 2•7 years ago
|
||
Please find the attached poc video link from Google drive https://drive.google.com/file/d/10Z2KAJB6UV5AC0_zkvLi9fq_vRfp6uZo/view?usp=drivesdk
Thanks
|
||
Comment 3•7 years ago
|
||
Feel free to read https://bugzilla.mozilla.org/createaccount.cgi first. It clearly says:
Bugzilla is a public place. Your comments and other activities on bugs will generally be publicly visible, and your email address will be accessible through public APIs and will be visible to all logged-in users of Bugzilla.
Description
•