| Max CVSS | 5.5 | Min CVSS | 5.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-5522 | 5.5 |
MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access restrictions and make status changes by leveraging a
|
12-01-2021 - 18:05 | 16-11-2012 - 00:55 | |
| CVE-2012-5523 | 5.5 |
core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing perm
|
12-01-2021 - 18:05 | 16-11-2012 - 00:55 |