In breve
- CVE-2023-22476 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda mantisbt/mantisbt, mantisbt (mantisbt).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.61%, superiore al 49.1% delle vulnerabilità.
- Correzione: aggiornare a 2.25.6 o successiva.
Description
Impact
Due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can get access to the Summary field of private Issues (i.e. having Private view status, or belonging to a private Project) via a crafted bug_arr[] parameter in bug_actiongroup_ext.php.
Patches
The vulnerability has been fixed in MantisBT version 2.25.6.
Workarounds
None
Credits
Thanks to d3vpoo1 for reporting the issue.
References
NVD description
Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions prior to 2.25.6, due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can access to the _Summary_ field of private Issues (i.e. having Private view status, or belonging to a private Project) via a crafted `bug_arr[]` parameter in *bug_actiongroup_ext.php*. This issue is fixed in version 2.25.6. There are no workarounds.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free