Bugzilla Advisory: Multiple security issues in Bugzilla have been discovered. These include information gathering issues (for example, database passwords may be revealed in webserver error messages), Cross Site Scripting issues, and design flaws which may make “confidential” data “protected” by Bugzilla available to all users.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33783/bugzilla_2.16.5_multiple_vulns.txt
Source: https://packetstormsecurity.com/files/33783/Bugzilla-Advisory-2.16.5.html