Skip to content
OpenAdvisories
Unscored DSA-161 2 CVEs

mantis - privilege escalation

Published Sep 4, 2002 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 mantis 0.17.1-2.5

Vulnerabilities 2

  • Unscored —

    Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) b…

  • Unscored —

    The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users…