5

CVE-2002-1112

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.

Data is provided by the National Vulnerability Database (NVD)
Mantis ≫ Mantis Version0.15.3
Mantis ≫ Mantis Version0.15.4
Mantis ≫ Mantis Version0.15.5
Mantis ≫ Mantis Version0.15.6
Mantis ≫ Mantis Version0.15.7
Mantis ≫ Mantis Version0.15.8
Mantis ≫ Mantis Version0.15.9
Mantis ≫ Mantis Version0.15.10
Mantis ≫ Mantis Version0.15.11
Mantis ≫ Mantis Version0.15.12
Mantis ≫ Mantis Version0.16.0
Mantis ≫ Mantis Version0.16.1
Mantis ≫ Mantis Version0.17.0
Mantis ≫ Mantis Version0.17.1
Mantis ≫ Mantis Version0.17.2
Mantis ≫ Mantis Version0.17.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.63% 0.692
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N