| Package | Affected versions | Patched versions |
|---|---|---|
| mantis | = 0.15.10= 0.15.11= 0.15.12= 0.15.3= 0.15.4= 0.15.5= 0.15.6= 0.15.7= 0.15.8= 0.15.9= 0.16.0= 0.16.1= 0.17.0= 0.17.1= 0.17.2= 0.17.3 |
Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free