CVE-2020-25781: MantisBT Unauthorized Access to Private Files Vulnerability
Summary
CVE-2020-25781: MantisBT unauthorized users able to access private files. Affects mantisbt/mantisbt versions < 2.24.3. Fixed in 2.24.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
MantisBT is an open-source issue tracker designed for software development projects. It allows users to manage and track issues, bugs, and feature requests efficiently. The platform supports various functionalities, including user management, project tracking, and file attachments. However, prior to version 2.24.3, MantisBT had a vulnerability that allowed unauthorized users to access private files linked to private issue notes, undermining the confidentiality of sensitive information.
Vulnerability Detail
An issue was discovered in file_download.php in MantisBT before version 2.24.3. The vulnerability arises from improper access controls, allowing users without permission to view private issue notes to download attachments associated with these notes by directly accessing the file download URL. This could lead to unauthorized disclosure of sensitive information, potentially impacting user privacy and data security.
How To Fix
Minimum fixed version
2.24.3
This is the first release that contains the fix.
composer require mantisbt/mantisbt:2.24.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the file download URLs by implementing additional authentication checks in your application. This may involve modifying the file_download.php script to ensure that only authorized users can access private attachments.
Conclusion
The CVE-2020-25781 vulnerability in MantisBT poses a risk of unauthorized access to private files, potentially compromising sensitive information. It is crucial to update to version 2.24.3 or later to mitigate this risk. For those unable to update, implementing additional access controls is recommended.
See every vulnerability recorded for mantisbt/mantisbt →
FAQ
CVE-2020-25781 is a vulnerability in MantisBT that allows unauthorized users to access private files linked to private issue notes.
If your MantisBT version is prior to 2.24.3, unauthorized users may be able to download sensitive attachments, compromising data security.
If updating is not possible, implement additional access controls in your application to restrict access to private file download URLs.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 4.3, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for mantisbt/mantisbt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
