Lucene search

GoogleOSV:CVE-2018-6526

HistoryFeb 02, 2018 - 9:29 a.m.

CVE-2018-6526

2018-02-0209:29:00

Google

osv.dev

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

68.6%

JSON

view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filter_ensure_valid_filter call in current_user_api.php.

CPENameOperatorVersion
mantisbteqrelease-2.2.1
mantisbteqrelease-1.3.3
mantisbteqrelease-2.8.0
mantisbteqrelease-1.3.0
mantisbteqrelease-1.3.5
mantisbteqrelease-1.2.0rc1
mantisbteqrelease-2.3.2
mantisbteqrelease-2.0.0-beta.1
mantisbteqrelease-2.0.0-rc.2
mantisbteqrelease-2.10.0

Name	Operator	Version
mantisbt	eq	release-2.2.1
mantisbt	eq	release-1.3.3
mantisbt	eq	release-2.8.0
mantisbt	eq	release-1.3.0
mantisbt	eq	release-1.3.5
mantisbt	eq	release-1.2.0rc1
mantisbt	eq	release-2.3.2
mantisbt	eq	release-2.0.0-beta.1
mantisbt	eq	release-2.0.0-rc.2
mantisbt	eq	release-2.10.0

Rows per page:

1-10 of 391

References

www.securityfocus.com/bid/103065

github.com/mantisbt/mantisbt/commit/de686a9e6d8c909485b87ca09c8f912bf83082f2

mantisbt.org/bugs/view.php?id=23921

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

68.6%

JSON

Related for OSV:CVE-2018-6526