Lucene search
Veracode Vulnerability DatabaseVERACODE:43860HistoryOct 18, 2023 - 6:19 a.m.
Information Disclosure
2023-10-1806:19:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
mantisbt
information disclosure
wiki redirection
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
21.1%
mantisbt/mantisbt is vulnerable to Information Disclosure. The vulnerability is due to insufficient access-level checks on the Wiki redirection page which allows an attacker to reveal private Projects’ names by accessing the wiki.php page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mantisbt/mantisbt | le | 2.25.7 | |
| mantisbt/mantisbt | le | 2.25.7 |
Related
prion
prion
Design/Logic Flaw
2023-10-16 22:15:00
openvas
openvas
MantisBT < 2.25.8 Information Disclosure Vulnerability - Linux
2023-11-29 00:00:00
MantisBT < 2.25.8 Information Disclosure Vulnerability - Windows
2023-11-29 00:00:00
github
github
MantisBT may disclose project names to unauthorized users
2023-10-17 14:20:36
cvelist
cvelist
CVE-2023-44394 Disclosure of project names to unauthorized users in MantisBT
2023-10-16 21:00:46
osv
osv
MantisBT may disclose project names to unauthorized users
2023-10-17 14:20:36
CVE-2023-44394
2023-10-16 22:15:12
nvd
nvd
CVE-2023-44394
2023-10-16 22:15:12
cve
cve
CVE-2023-44394
2023-10-16 22:15:12
freebsd
freebsd
mantis -- multiple vulnerabilities
2023-10-14 00:00:00
nessus
nessus
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
21.1%
Related for VERACODE:43860