Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2vwf-xc9m-9w4j

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a password starting will a null byte, which triggers an unauthenticated bind.

gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a password starting will a null byte, which triggers an unauthenticated bind.

EPSS

Процентиль: 55%
0.00324
Низкий

Дефекты

CWE-287

Связанные уязвимости

ubuntu
больше 11 лет назад

gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a password starting will a null byte, which triggers an unauthenticated bind.

nvd
больше 11 лет назад

gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a password starting will a null byte, which triggers an unauthenticated bind.

debian
больше 11 лет назад

gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to ...

EPSS

Процентиль: 55%
0.00324
Низкий

Дефекты

CWE-287