https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T16:52:03.872588+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-62520 CVE-2025-62520 — MantisBT unauthorized disclosure of private project column configuration 2026-10-12T16:52:03.887875+00:00

Affected: mantisbt

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-level checks, any non-admin user with access to manage_config_columns_page.php can use the Copy From action to retrieve the columns configuration from a private project they have no access to. This issue is fixed in version 2.27.2.