CVE-2020-28413

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP

Medium · published December 30, 2020

CVSS v3.1
5.3
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.04782 · 91.9th percentile
Published
2020-12-30T21:28Z
EPSS history
Timeline
  • 30 DEC 21:28Z
    In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP
    cvelistv5