CVE-2023-22476

MEDIUM

MantisBT < 2.25.6 - Authenticated Exposure of Sensitive Information via Group Action Bug Array Parameter

Title source: llm
STIX 2.1

Description

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions prior to 2.25.6, due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can access to the _Summary_ field of private Issues (i.e. having Private view status, or belonging to a private Project) via a crafted `bug_arr[]` parameter in *bug_actiongroup_ext.php*. This issue is fixed in version 2.25.6. There are no workarounds.

References (2)

Core 2
Core References
Exploit, Issue Tracking, Vendor Advisory x_refsource_misc
https://www.mantisbt.org/bugs/view.php?id=31086

Scores

CVSS v3 4.3
EPSS 0.0061
EPSS Percentile 44.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (2)
mantisbt/mantisbt < 2.25.6
mantisbt/mantisbt 0 - 2.25.6Packagist
Published Feb 23, 2023
Tracked Since Feb 18, 2026