PT-2023-18528 · Unknown · Mantis Bug Tracker

D3Vpoo1 · Publicado 2023-02-23 · Atualizado 2023-03-03 · CVE-2023-22476

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions prior to 2.25.6

Description The issue is caused by insufficient access-level checks, allowing any logged-in user who can perform Group Actions to access the Summary field of private Issues via a crafted bug arr[] parameter in bug actiongroup ext.php. This affects issues with Private view status or those belonging to a private Project.

Recommendations For versions prior to 2.25.6, update to version 2.25.6 to resolve the issue. As a temporary workaround, consider restricting access to the bug actiongroup ext.php file or limiting the ability to perform Group Actions until the update can be applied. Avoid using the crafted bug arr[] parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-22476

GHSA-HF4X-6H87-HM79

Produtos afetados

Mantis Bug Tracker

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22476.json · Exploit
• 🔥 https://mantisbt.org/bugs/view.php?id=31086 · Exploit
• https://github.com/mantisbt/mantisbt · Nota
• https://github.com/mantisbt/mantisbt/security/advisories/GHSA-hf4x-6h87-hm79 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-22476 · Nota de Segurança
• https://t.me/cibsecurity/58807 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-22476 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-hf4x-6h87-hm79 · Aviso do Fabricante