PT-2021-11961 · Mantisbt · Mantisbt Source Integration Plugin

Jrckmcsbo · Published 2021-01-18 · Updated 2021-01-22 · CVE-2020-36192

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MantisBT Source Integration plugin versions prior to 2.4.1

Description: An issue allows an attacker to gain access to the Summary field of private Issues, either marked as Private or part of a private Project, if they are attached to an existing Changeset. The information is visible on the "view.php" page and the "list.php" page, in a pop-up on the Affected Issues id hyperlink. If the attacker has "Update threshold" in the plugin's configuration, they can link any Issue to a Changeset by entering the Issue's id, even if they do not have access to it.

Recommendations: For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "view.php" and "list.php" pages, or disabling the "Update threshold" feature in the plugin's configuration to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2020-36192

Affected Products

Mantisbt Source Integration Plugin

References · 4

• 🔥 https://github.com/mantisbt-plugins/source-integration/issues/344 · Exploit
• https://osv.dev/vulnerability/CVE-2020-36192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36192 · Security Note
• https://t.me/cvenotify/8659 · Telegram Post