CVE-2018-9839: Input Validation
An issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on bugreportpage.php (modifying the 'mid' parameter), any user with REPORTER access or above is able to view any private issue's details (summary, description, steps to reproduce, additional information) when cloning it. By checking the 'Copy issue notes' and 'Copy attachments' checkboxes and completing the clone operation, this data also becomes public (except private notes).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9839?
The severity of CVE-2018-9839 is medium, with a severity score of 6.5.
How can an attacker exploit CVE-2018-9839?
An attacker can exploit CVE-2018-9839 by using a crafted request on bug_report_page.php to modify the 'm_id' parameter and view private issue details.
Which versions of MantisBT are affected by CVE-2018-9839?
MantisBT versions 1.3.14 and 2.0.0 are affected by CVE-2018-9839.
How can I fix CVE-2018-9839?
To fix CVE-2018-9839, you should upgrade MantisBT to a version higher than 2.0.0 or apply the necessary patches provided by the vendor.
Where can I find more information about CVE-2018-9839?
More information about CVE-2018-9839 can be found in the references: https://github.com/mantisbt/mantisbt/commit/1fbcd9bca2f2c77cb61624d36ddee4b3802c38ea and https://mantisbt.org/bugs/view.php?id=24221.