CVE-2014-9388

bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id parameter

published December 17, 2014

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01992 · 80.4th percentile
Published
2014-12-17T19:00Z
EPSS history
Timeline
  • 17 DEC 19:00Z
    bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id parameter
    cvelistv5