A previously unknown security flaw in Bugzilla
Bugzilla is expected today to issue a fix for this very serious weakness, which potentially exposes a veritable gold mine of vulnerabilities that would be highly prized by cyber criminals and nation-state actors.

The link for this article located at Krebs on Security is no longer available.