CVE-2020-29604: MantisBT Vulnerability in bug_actiongroup.php Allows Unauthorized Access to Private Issues
Summary
CVE-2020-29604: MantisBT Missing Authorization access check in bug_actiongroup.php. Affects mantisbt/mantisbt versions < 2.24.4. Fixed in 2.24.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MantisBT is an open-source bug tracking system that helps teams manage software development and track issues effectively. It provides features such as issue tracking, project management, and collaboration tools. However, prior to version 2.24.4, MantisBT had a vulnerability that allowed users with rights to create new issues to access private issues without proper authorization.
Vulnerability Detail
An issue was discovered in MantisBT before version 2.24.4, where a missing authorization check in the bug_actiongroup.php file permits an attacker, who has the ability to create new issues, to exploit the COPY group action. This action allows the attacker to clone any private issue, including all associated bugnotes and attachments, by manipulating the bug_arr[] parameter. As a result, this vulnerability can lead to unauthorized access to potentially confidential information, posing a significant risk to user privacy and data security.
How To Fix
Minimum fixed version
2.24.4
This is the first release that contains the fix.
composer require mantisbt/mantisbt:2.24.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict the rights of users who can create new issues until the package is updated. This can be done by adjusting user permissions in the MantisBT settings to prevent unauthorized access to private issues.
Conclusion
In summary, CVE-2020-29604 is a significant vulnerability in MantisBT that allows unauthorized access to private issues due to a missing authorization check. It is crucial for users to update to version 2.24.4 or later to mitigate this risk and protect sensitive information.
See every vulnerability recorded for mantisbt/mantisbt →
FAQ
CVE-2020-29604 is a vulnerability in MantisBT that allows unauthorized users to access private issues due to a missing authorization check.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to unauthorized access to confidential information, including private bug reports and attachments, which can compromise user privacy and data security.
Yes, the vulnerability is fixed in MantisBT version 2.24.4 and later. It is recommended to update to this version or newer.
The CVSS score of this vulnerability is 6.5, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for mantisbt/mantisbt.
