Improper Authorization

MantisBT is vulnerable to Improper Authorization. The vulnerability is due to insufficient enforcement of the reportissuesforunreleasedversionsthreshold permission, which allows a user below the required privilege level to assign unreleased product versions...