Mantisbt
91 CVEs
product
Monthly
The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Privilege Escalation
Mantisbt
NVD
GitHub
CVSS 2.0
7.5
EPSS
3.7%
EPSS 4%
CVSS 7.5
HIGH
POC
PATCH
This Week
The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Privilege Escalation
Mantisbt
NVD
GitHub
Prev
Page 2 of 2