CVE-2013-1811

2019-11-0722:28:06

redhat

www.cve.org

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

45.4%

JSON

An access control issue in MantisBT before 1.2.13 allows users with “Reporter” permissions to change any issue to “New”.

CNA Affected

[
  {
    "product": "mantis",
    "vendor": "mantis",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.13"
      }
    ]
  }
]

References

www.debian.org/security/2015/dsa-3120

www.openwall.com/lists/oss-security/2013/03/03/6

www.openwall.com/lists/oss-security/2013/03/04/9

mantisbt.org/bugs/view.php?id=15258

security-tracker.debian.org/tracker/CVE-2013-1811