Lucene search
Veracode Vulnerability DatabaseVERACODE:39477HistoryMar 01, 2023 - 11:27 a.m.
Information Disclosure
2023-03-0111:27:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
mantisbt
vulnerability
private issues
information disclosure
software
EPSS
0.001
Percentile
25.6%
mantisbt/mantisbt is vulnerable to Information Disclosure. The vulnerability allows any logged-in user to gain access to the Summary field of private issues if they are allowed to access group actions in the account which can lead to information disclosure.
Related
github
github
MantisBT may expose private issues' summaries to unauthorized users
2023-02-23 19:39:54
prion
prion
Design/Logic Flaw
2023-02-23 19:15:00
osv
osv
CVE-2023-22476
2023-02-23 19:15:13
MantisBT may expose private issues' summaries to unauthorized users
2023-02-23 19:39:54
cvelist
cvelist
nvd
nvd
CVE-2023-22476
2023-02-23 19:15:13
cve
cve
CVE-2023-22476
2023-02-23 19:15:13
nessus
nessus
openvas
openvas
MantisBT < 2.25.6 Multiple Vulnerabilities - Windows
2023-02-27 00:00:00
MantisBT < 2.25.6 Multiple Vulnerabilities - Linux
2023-02-27 00:00:00
freebsd
freebsd
mantis -- multiple vulnerabilities
2023-01-06 00:00:00