PT-2021-11698

Name of the Vulnerable Software and Affected Versions: MantisBT versions prior to 2.24.4 Description: The issue allows any unprivileged logged-in user to retrieve Private Projects' names via the project id parameter in the "manage proj edit page.php" page, without having access to them...