Количество 3
Количество 3
CVE-2026-34754
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.
CVE-2026-34754
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Version ...
GHSA-h4x5-gvx6-3rwc
MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-34754 Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2. | CVSS3: 4.3 | 0% Низкий | 3 месяца назад | |
CVE-2026-34754 Mantis Bug Tracker (MantisBT) is an open source issue tracker. Version ... | CVSS3: 4.3 | 0% Низкий | 3 месяца назад | |
GHSA-h4x5-gvx6-3rwc MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу