PT-2021-11700

Name of the Vulnerable Software and Affected Versions: MantisBT versions prior to 2.24.4 Description: An issue was discovered due to insufficient access-level checks, allowing any logged-in user who can perform Group Actions to access the Summary fields of private Issues via bug arr in a crafted...

PT-2020-16231

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.24.3 Description An issue was discovered that allows an attacker to inject HTML and, if Content Security Policy CSP settings permit, achieve execution of arbitrary JavaScript when attempting to update a custom fiel...

PT-2011-4403

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.8 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter. This is related to the bug actiongroup page.php file. Recommendations For...