Lucene search
GitHub_MVULNRICHMENT:CVE-2024-45792HistorySep 30, 2024 - 2:40 p.m.
CVE-2024-45792 MantisBT vulnerable to information disclosure with user profiles
2024-09-3014:40:25
CWE-200
GitHub_M
github.com
3
mantisbt
information disclosure
user profiles
vulnerability
fixed
CVSS4
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N
AI Score
6.3
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users’ personal system profiles. This vulnerability is fixed in 2.26.4.
Related
cve
cve
CVE-2024-45792
2024-09-30 15:15:05
github
github
MantisBT vulnerable to information disclosure with user profiles
2024-09-30 17:48:15
nvd
nvd
CVE-2024-45792
2024-09-30 15:15:05
cvelist
cvelist
CVSS4
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N
AI Score
6.3
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-45792