CVE-2023-22476: MantisBT exposes private issues' summaries to unauthorized users
Summary
CVE-2023-22476: MantisBT may expose private issues' summaries to unauthorized users. Affects mantisbt/mantisbt versions < 2.25.6. Fixed in 2.25.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MantisBT is an open-source bug tracking system that helps software development teams track and manage issues throughout the development lifecycle. It provides a centralized platform for users to report bugs, track their progress, and collaborate on issue resolution. MantisBT is widely used in various industries and is known for its flexibility and ease of use.
Vulnerability Detail
The vulnerability in MantisBT allows unauthorized users to access the summary field of private issues. This vulnerability arises due to insufficient access-level checks in the bug_actiongroup_ext.php file. Specifically, any logged-in user with permission to perform Group Actions can exploit a crafted bug_arr[] parameter to retrieve the summary of private issues. Private issues are those with a private view status or belonging to a private project. This vulnerability could lead to a breach of sensitive information and compromise the confidentiality of private issues.
How To Fix
Minimum fixed version
2.25.6
This is the first release that contains the fix.
composer require mantisbt/mantisbt:2.25.6Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no known workarounds for this vulnerability. Users are encouraged to apply the official patch as soon as it is released to mitigate the risk of unauthorized access to private issue summaries.
Conclusion
The vulnerability in MantisBT that exposes private issue summaries to unauthorized users poses a risk to the confidentiality of sensitive information. Users are advised to update their installations to the latest version once the patch is released. Regularly updating software is crucial to ensure the application is protected against known vulnerabilities. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mantisbt/mantisbt →
FAQ
MantisBT is an open-source bug tracking system used by software development teams to manage and track issues throughout the development process.
The vulnerability allows unauthorized users to access the summary field of private issues, potentially compromising the confidentiality of sensitive information.
The vulnerability was reported by d3vpoo1 (https://github.com/jrckmcsb) and acknowledged by the MantisBT development team.
Currently, there are no known workarounds for this vulnerability. Users should apply the official patch once it is released.
The MantisBT development team is actively working on the patch, and it is expected to be included in the next release, version 2.25.6.
References
Related vulnerabilities
Recent vulnerabilities recorded for mantisbt/mantisbt.
