CVE-2024-45792 — MantisBT vulnerable to information disclosure with user profiles
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users' …
Published: 2024-09-30 · CVSS: 5.3 · CVSS 4.0
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users' personal system profiles. This vulnerability is fixed in 2.26.4.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7