En resumen
- CVE-2024-45792 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a mantisbt/mantisbt, mantisbt (mantisbt).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.53%, mayor que el 44.9% de las vulnerabilidades.
- Solución: actualizar a 2.26.4 o posterior.
Description
Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users' personal system profiles.
Impact
Disclosure of private system profiles: Platform, OS, OS version, Description.
Patches
Workarounds
None
References
https://mantisbt.org/bugs/view.php?id=34640
NVD description
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users' personal system profiles. This vulnerability is fixed in 2.26.4.
Más vulnerabilidades de mantisbt/mantisbt
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free