Major security flaw in Bugzilla discovered, fixed, and revealed 6 months later

bugzilla.mozilla.org