CVE-2008-4688 core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue'...
MediumCVSS 5.0
EPSS 11.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mantis | <= 1.1.3 | No fix listed |
| mantis | = 0.19.3 | No fix listed |
| mantis | = 0.19.4 | No fix listed |
| mantis | = 1.0.1 | No fix listed |
| mantis | = 1.0.2 | No fix listed |
| mantis | = 1.0.3 | No fix listed |
| mantis | = 1.0.4 | No fix listed |
| mantis | = 1.0.5 | No fix listed |
| mantis | = 1.0.6 | No fix listed |
| mantis | = 1.0.7 | No fix listed |
| mantis | = 1.0.8 | No fix listed |
| mantis | = 1.1.1 | No fix listed |
| mantis | = 1.1.2 | No fix listed |
References
- mantisbt.svn.sourceforge.net
- 32243 third-party-advisory
- 32975 third-party-advisory
- GLSA-200812-07 vendor-advisory
- www.mantisbt.org
- www.mantisbt.org
- [oss-security] 20081020 Re: CVE request: mantisbt < 1.1.4: RCE mailing-list
- 31868 vdb-entry