PT-2023-18528 · Unknown · Mantis Bug Tracker

D3Vpoo1 · Published 2023-02-23 · Updated 2023-03-03 · CVE-2023-22476

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions prior to 2.25.6

Description The issue is caused by insufficient access-level checks, allowing any logged-in user who can perform Group Actions to access the Summary field of private Issues via a crafted bug arr[] parameter in bug actiongroup ext.php. This affects issues with Private view status or those belonging to a private Project.

Recommendations For versions prior to 2.25.6, update to version 2.25.6 to resolve the issue. As a temporary workaround, consider restricting access to the bug actiongroup ext.php file or limiting the ability to perform Group Actions until the update can be applied. Avoid using the crafted bug arr[] parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-22476

GHSA-HF4X-6H87-HM79

Affected Products

Mantis Bug Tracker

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22476.json · Exploit
• 🔥 https://mantisbt.org/bugs/view.php?id=31086 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-22476 · Security Note
• https://osv.dev/vulnerability/CVE-2023-22476 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hf4x-6h87-hm79 · Vendor Advisory
• https://github.com/mantisbt/mantisbt · Note
• https://github.com/mantisbt/mantisbt/security/advisories/GHSA-hf4x-6h87-hm79 · Note
• https://t.me/cibsecurity/58807 · Telegram Post