Lucene search

K
osvGoogleOSV:CVE-2020-28413
HistoryDec 30, 2020 - 10:15 p.m.

CVE-2020-28413

2020-12-3022:15:12
Google
osv.dev
1
mantisbt
sql injection
mc_project_get_users
api soap

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

45.9%

In MantisBT 2.24.3, SQL Injection can occur in the parameter “access” of the mc_project_get_users function through the API SOAP.

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

45.9%