Описание
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.
EPSS
Процентиль: 16%
0.00248
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 4.3
debian
3 месяца назад
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Version ...
CVSS3: 4.3
github
3 месяца назад
MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API
EPSS
Процентиль: 16%
0.00248
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-284