Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjg8-h43j-7qrg

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request.

Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request.

EPSS

Процентиль: 52%
0.00291
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 10 лет назад

Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request.

CVSS3: 5.3
nvd
почти 10 лет назад

Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request.

CVSS3: 5.3
debian
почти 10 лет назад

Incomplete blacklist vulnerability in the config_is_private function i ...

EPSS

Процентиль: 52%
0.00291
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200