Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugnotes revisions, gaining access to potentially confidential information via the bugnote_id parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MantisBT 安全漏洞
Vulnerability Description
MantisBT是MantisBT（Mantisbt）团队的一套基于Web的开源缺陷跟踪系统。该系统以Web操作的形式提供项目管理及缺陷跟踪服务。 MantisBT 2.24.4之前版本存在安全漏洞，该漏洞源于bug_revision_view_page.php允许非特权攻击者可利用该漏洞查看私有问题的摘要字段，以及错误注释修订，通过错误注释id参数获得对潜在机密信息的访问权。
CVSS Information
N/A
Vulnerability Type
N/A