https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 13:54:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-249402 EUVD-2026-249402 https://cve.radiocsirt.org/vuln/euvd-2026-249402 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44394 <p>MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects&#39; names, by accessing wiki.php with sequentially incremented IDs. This issue has been addressed in commit `65c44883f` which has been included in release `2.25.8`. Users are advised to upgrade. Users unable to upgrade should disable wiki integration ( `$g_wiki_enable = OFF;`).</p> <p>MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects&#39; names, by accessing wiki.php with sequentially incremented IDs. This issue has been addressed in commit `65c44883f` which has been included in release `2.25.8`. Users are advised to upgrade. Users unable to upgrade should disable wiki integration ( `$g_wiki_enable = OFF;`).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-44394 https://cve.radiocsirt.org/vuln/ghsa-v642-mh27-8j6m <p><strong>Affected:</strong> Packagist: mantisbt/mantisbt</p> <p>### Impact</p> <p>Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects&#39; names, by accessing wiki.php with sequentially incremented IDs.</p> <p>### Patches The vulnerability has been fixed in MantisBT version 2.25.8 (https://github.com/mantisbt/mantisbt/commit/65c44883f9d24f3ccef066fb523c93d8fdd7afc1).</p> <p>### Workarounds Disable wiki integration ( `$g_wiki_enable = OFF;`)</p> <p>### References - https://mantisbt.org/bugs/view.php?id=32981</p> <p><strong>Affected:</strong> Packagist: mantisbt/mantisbt</p> <p>### Impact</p> <p>Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects&#39; names, by accessing wiki.php with sequentially incremented IDs.</p> <p>### Patches The vulnerability has been fixed in MantisBT version 2.25.8 (https://github.com/mantisbt/mantisbt/commit/65c44883f9d24f3ccef066fb523c93d8fdd7afc1).</p> <p>### Workarounds Disable wiki integration ( `$g_wiki_enable = OFF;`)</p> <p>### References - https://mantisbt.org/bugs/view.php?id=32981</p> https://cve.radiocsirt.org/vuln/ghsa-v642-mh27-8j6m https://cve.radiocsirt.org/vuln/gsd-2023-44394 gsd-2023-44394 https://cve.radiocsirt.org/vuln/gsd-2023-44394