CVE-2013-1930

EPSS 0.7%
Veröffentlicht 31.10.2019 20:15:10
Zuletzt bearbeitet 21.11.2024 01:50:41
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mantisbt ≫ Mantisbt Version >= 1.2.12 < 1.2.15

Fedoraproject ≫ Fedora Version17

Fedoraproject ≫ Fedora Version18

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.7%	0.697

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103438.html

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html

Third Party Advisory

http://www.openwall.com/lists/oss-security/2013/04/06/4

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/58890

Third Party Advisory

VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1930

Third Party Advisory

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/83796

Third Party Advisory

VDB Entry

https://mantisbt.org/bugs/view.php?id=15453

Vendor Advisory

https://security-tracker.debian.org/tracker/CVE-2013-1930

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-1930

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1930

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1930

EUVD