Vulnerability in Mantis

CVE-2005-4523

Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.

EPSS: 0.018 (76.5th percentile) — read the EPSS interpretation.

Affected products

  • Mantis — versions 0.9, 0.9.1, 0.10
  • N/a — versions n/a

References