CVE-2018-6526

view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter…

published February 2, 2018

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filter_ensure_valid_filter call in current_user_api.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03966 · 90.4th percentile
Published
2018-02-02T09:00Z
EPSS history
Timeline
  • 02 FEB 09:00Z
    view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter…
    cvelistv5