CVE-2012-5523

core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote…

published November 16, 2012

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing permission to view that bug.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01883 · 79.2th percentile
Published
2012-11-16T00:00Z
EPSS history
Timeline
  • 16 NOV 00:00Z
    core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote…
    cvelistv5