Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field.
Max CVSS
5.0
EPSS Score
0.79%
Published
2006-12-15
Updated
2017-07-29
Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.
Max CVSS
10.0
EPSS Score
0.18%
Published
2006-12-14
Updated
2008-09-05
2 vulnerabilities found