CVEvulnerability

CVE-2026-34754

4.3 MEDIUM Published 2026-05-20 Modified 2026-07-24 Official page ↗

Status: Deferred
Published: 2026-05-20
Last modified: 2026-07-24
Assigner: [email protected]
CVSS 3.1 ([email protected]): 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses: CWE-284

Description

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.

Weakness · CWE (1)

CWE-284 Improper Access Control weakness

References

https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206 github.com
https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc github.com
https://mantisbt.org/bugs/view.php?id=36976 mantisbt.org

CVE-2026-34754

Description

Related

Weakness · CWE (1)

References