Design/Logic Flaw

Mantis Bug Tracker MantisBT is an open source issue tracker. In versions prior to 2.25.6, due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can access to the Summary field of private Issues i.e. having Private view status, or belonging to a private Proje...

PT-2021-11700

Name of the Vulnerable Software and Affected Versions: MantisBT versions prior to 2.24.4 Description: An issue was discovered due to insufficient access-level checks, allowing any logged-in user who can perform Group Actions to access the Summary fields of private Issues via bug arr in a crafted...

CVE-2020-25830

An issue was discovered in MantisBT before 2.24.3. Improper escaping of a custom field's name allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript when attempting to update said custom field via bugactiongrouppage.php...

PT-2020-16231

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.24.3 Description An issue was discovered that allows an attacker to inject HTML and, if Content Security Policy CSP settings permit, achieve execution of arbitrary JavaScript when attempting to update a custom fiel...

MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities

This host is running MantisBT and is prone to multiple local file include and cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmantismultlfinxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities...

PT-2011-4403

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.8 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter. This is related to the bug actiongroup page.php file. Recommendations For...

PT-2011-4539

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the action parameter in bug actiongroup ext page.php, related to bug actiongroup page.php...