Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 670868: (CVE-2011-2978) [SECURITY] Account preferences page trusts user-modifiable field for obtaining current e-mail address

Browse Source 
r/a=LpSolit


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-3_4-BRANCH@262586 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
mkanat%bugzilla.org 2011-08-04 21:06:12 +00:00
parent 586f6e4005
commit e2c29f672f
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
mozilla/webtools/bugzilla/.bzrrev
View File

@ -1 +1 @@
6807
6808

2
mozilla/webtools/bugzilla/userprefs.cgi
View File

@ -120,7 +120,7 @@ sub SaveAccount {
&& Bugzilla->params->{"allowemailchange"}
&& $cgi->param('new_login_name'))
{
my $old_login_name = $cgi->param('Bugzilla_login');
my $old_login_name = $user->login;
my $new_login_name = trim($cgi->param('new_login_name'));
if($old_login_name ne $new_login_name) {