Mantis prior to 0.17.4 allows remote malicious users to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mantis mantis 0.15.10 |
||
mantis mantis 0.15.8 |
||
mantis mantis 0.15.9 |
||
mantis mantis 0.15.6 |
||
mantis mantis 0.15.7 |
||
mantis mantis 0.17.2 |
||
mantis mantis 0.17.3 |
||
mantis mantis 0.15.3 |
||
mantis mantis 0.15.4 |
||
mantis mantis 0.15.5 |
||
mantis mantis 0.17.0 |
||
mantis mantis 0.17.1 |
||
mantis mantis 0.15.11 |
||
mantis mantis 0.15.12 |
||
mantis mantis 0.16.0 |
||
mantis mantis 0.16.1 |
Vulmon