CVE-2018-9839

An issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on bugreportpage.php modifying the 'mid' parameter, any user with REPORTER access or above is able to view any private issue's details summary, description, steps to reproduce, additional information when cloni...

CVE-2018-9839

CVE-2018-9839 affects MantisBT up to versions 1.3.14 and 2.0.0. A crafted request to bug_report_page.php altering the m_id parameter can let a user with REPORTER access or higher view private issue details (summary, description, steps, additional information) when cloning. If the user selects Cop...