MantisBT < 2.24.4 Multiple Vulnerabilities - Linux

MantisBT is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-35849

Affected software: MantisBT prior to 2.24.4. Vulnerability: An incorrect access check in bug_revision_view_page.php lets an unprivileged attacker view the Summary field of private issues and bugnotes revisions via the bugnote_id parameter, resulting in exposure of potentially confidential informa...