GHSA-qpj5-f88q-x7px

ghsaUSosv

MantisBT Insecure Storage in manage_proj_edit_page.php

view advisory published 2022-05-24Licence: CC-BY-4.0

In manage_proj_edit_page.php in MantisBT before 2.24.4, any unprivileged logged-in user can retrieve Private Projects' names via the manage_proj_edit_page.php project_id parameter, without having access to them.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-29603US	medium4.3	1.06% (64th)	—	2021-01-29
In manage_proj_edit_page.php in MantisBT before 2.24.4, any unprivileged logged-in user can retrieve Private Projects' names via the manage_proj_edit_page.php project_id parameter,…

references

External citations — patches, advisories, analysis.

https://github.com/mantisbt/mantisbtPACKAGE
https://github.com/mantisbt/mantisbt/commit/cff10f266f67e2da3060ea4d0b9ecbb29c21b869WEB
https://mantisbt.org/bugs/view.php?id=27357WEB
https://mantisbt.org/bugs/view.php?id=27726WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-29603ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan