Lucene search

K
cvelistMitreCVELIST:CVE-2020-29603
HistoryJan 29, 2021 - 6:41 a.m.

CVE-2020-29603

2021-01-2906:41:36
mitre
www.cve.org
3
cve-2020-29603
mantisbt
vulnerability
unauthorized access
private projects

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

24.8%

In manage_proj_edit_page.php in MantisBT before 2.24.4, any unprivileged logged-in user can retrieve Private Projects’ names via the manage_proj_edit_page.php project_id parameter, without having access to them.

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

24.8%

Related for CVELIST:CVE-2020-29603