CVE-2006-6515

No fix known EPSS 1%

Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.

Published 2006-12-14 · CVE record · OSV

Products: mantis