Vulnerability in Mantis

CVE-2006-6515

Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.

EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.

Affected products

  • Mantis — versions 1.0.0, 1.0.0_rc1, 1.0.0_rc2
  • N/a — versions n/a

References