SB2019103118 - Input validation error in mantisbt.sourceforge.net MantisBT
Published: October 31, 2019 Updated: July 17, 2020
Security Bulletin ID
SB2019103118
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2013-1930)
The vulnerability allows a remote authenticated user to manipulate data.
MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.
Remediation
Install update from vendor's website.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103438.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html
- http://www.openwall.com/lists/oss-security/2013/04/06/4
- http://www.securityfocus.com/bid/58890
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83796
- https://mantisbt.org/bugs/view.php?id=15453
- https://security-tracker.debian.org/tracker/CVE-2013-1930