Threats tagged 'ghsa-g582-8vwr-68h2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2025-62520mantisbt/mantisbt · MantisBT unauthorized disclosure of private project column configuration Medium4.32025-11-03GCVE DatabaseCVE-2025-62520 MantisBT versions prior to 2.27.2 have an access control vulnerability allowing non-admin users with MANAGER role to disclose private project column configurations via the 'Copy From' action on the manage_config_columns_page.php page. This does not allow modification of private project configurations. The issue is fixed in version 2.27.2. Vulnerability CWE-285 #ghsa-g582-8vwr-68h2 #packagist	GCVE Database	2025-11-03

Page 1 of 1