PT-2021-11699

Name of the Vulnerable Software and Affected Versions: MantisBT versions prior to 2.24.4 Description: An issue in MantisBT allows an attacker with rights to create new issues to use the COPY group action to create a clone of any private issue, including all bugnotes and attachments, via the bug a...

PT-2012-3094

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.9 Description The issue concerns a permission checking flaw in bug actiongroup.php. This flaw allows remote authenticated users with certain privileges to bypass access restrictions and move bug reports to...