← Zurück zur CVE-Suche

CVE-2026-34754

Mantis Bug Tracker

Beschreibung

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.

CVSS 4.3EPSS 0.248%Risiko 0.44
Quelle öffnen
Veröffentlicht
2026-05-20 00:16:34
Betroffene Versionen
<2.28.2
Typ
Package
Zuletzt geändert
2026-07-24 09:10:00
Vektor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N