CVE-2023-22476CWE-200

MantisBT: Exposure of Private issues' summary to unauthorized users

Medium · published February 23, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
48.4
In the wild
Unconfirmed
What it is

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions prior to 2.25.6, due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can access to the _Summary_ field of private Issues (i.e. having Private view status, or belonging to a private Project) via a crafted `bug_arr[]` parameter in *bug_actiongroup_ext.php*. This issue is fixed in version 2.25.6. There are no workarounds.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00608 · 48.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-02-23T19:00Z
EPSS history
Timeline
  • 23 FEB 19:00Z
    MantisBT: Exposure of Private issues' summary to unauthorized users
    cvelistv5