Description
view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filter_ensure_valid_filter call in current_user_api.php.
Unscored
CVE-2018-6526
EUVD-2018-18278GHSA-8cm6-5rw5-8g6h
view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid fil…
Published Feb 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre