PT-2021-11961

Name of the Vulnerable Software and Affected Versions: MantisBT Source Integration plugin versions prior to 2.4.1 Description: An issue allows an attacker to gain access to the Summary field of private Issues, either marked as Private or part of a private Project, if they are attached to an...

CVE-2020-35849

An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bugrevisionviewpage.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugnotes revisions, gaining access to potentially confidential information via the bugnoteid parameter...

MantisBT 安全漏洞

MantisBT is a lightweight, free and open source, web-based defect tracking system. An information disclosure vulnerability exists in MantisBT versions prior to 2.24.4. The vulnerability stems from a failure to check access to bugrevisionviewpage.php correctly. An attacker can exploit the...

PT-2020-17486

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.24.4 Description An issue in MantisBT allows an unprivileged attacker to view the Summary field of private issues and bugnotes revisions, potentially gaining access to confidential information. This is achieved via...

GitLab: Elasticsearch leaks data through the notes scope

Summary The Elasticsearch results, when filtering using the notes scope, leaks data about private groups, private projects, and private issues. Steps to reproduce 1. Search, as an anonymous user, nextbit in the Gitlab group, filtering for "comments" link 2. You will have as result a private note...

GitLab: Group search with Elastic search enable leaks unrelated data

Summary Performing a group search when Elastic Search is enabled provides access to unrelated merge requests, issues activity, leaking the existence of private groups, plus their activity and MRs. This happens both on the GUI and with the APIs Steps to reproduce Let's take this search on the Gitl...