GitHub Advisoryadvisory · Packagist

GHSA-hf4x-6h87-hm79 MantisBT may expose private issues' summaries to unauthorized users

MEDIUM Published 2023-02-23 Modified 2023-10-03 Official page ↗
Aliases
CVE-2023-22476
Ecosystem
Packagist
Packages
mantisbt/mantisbt
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200
Reviewed
2023-02-23

Affected packages

• Packagist mantisbt/mantisbt: < 2.25.6 → fixed in 2.25.6

Description

Impact Due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can get access to the _Summary_ field of private Issues (i.e. having Private view status, or belonging to a private Project) via a crafted `bug_arr[]` parameter in *bug_actiongroup_ext.php*. Patches The vulnerability has been fixed in MantisBT version 2.25.6. Workarounds None Credits Thanks to d3vpoo1 for reporting the issue. References • https://mantisbt.org/bugs/view.php?id=31086

Related

Alias · CVE (1)

  • CVE-2023-22476 Mantis Bug Tracker (MantisBT) is an open source issue tracker. vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References