Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mantis对报告者的输出限制可被绕过漏洞
Vulnerability Description
mantis是一款基于WEB的PHP编写MySQL后台支持的漏洞跟踪系统。 mantis可以配置成只向报告者显示他们所报告的漏洞，这可以通过设置"limit_reporters"开关到"ON"状态来实现。这会自动在'View Bugs'页面中设置'reporter'过滤。 通过点击'View Bugs'页面中的'Print Reports'链接，页面的信息也可以被打印。然而负责打印的脚本print_all_bug_page.php并没有检查'limit_reporters option'开关，这就允许报告
CVSS Information
N/A
Vulnerability Type
N/A