exploitDog

GHSA-gpmg-wwf8-crq7

Опубликовано: 30 апр. 2022

Источник: github

Github: Не прошло ревью

Описание

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2002-1112
https://exchange.xforce.ibmcloud.com/vulnerabilities/9899
http://mantisbt.sourceforge.net/advisories/2002/2002-03.txt
http://marc.info/?l=bugtraq&m=102978673018271&w=2
http://www.debian.org/security/2002/dsa-153
http://www.securityfocus.com/bid/5514

EPSS

Процентиль: 72%

0.0152

Низкий

CVE ID

Связанные уязвимости

CVE-2002-1112

nvd

почти 24 года назад

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.

CVE-2002-1112

debian

почти 24 года назад

Mantis before 0.17.4 allows remote attackers to list project bugs with ...

EPSS

Процентиль: 72%

0.0152

Низкий

CVE ID