What’s Vulnerable › Vulnerabilities

CVE-2018-6526

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-02 · updated 2026-06-17
• Weakness: CWE-200

Description

view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filter_ensure_valid_filter call in current_user_api.php.

Affected products

• mantisbt: through 2.10.0

References

• http://www.securityfocus.com/bid/103065
• https://github.com/mantisbt/mantisbt/commit/de686a9e6d8c909485b87ca09c8f912bf83082f2
• https://mantisbt.org/bugs/view.php?id=23921
• http://www.securityfocus.com/bid/103065
• https://github.com/mantisbt/mantisbt/commit/de686a9e6d8c909485b87ca09c8f912bf83082f2
• https://mantisbt.org/bugs/view.php?id=23921

Get alerted when CVE-2018-6526 or the next vulnerability affects your stack