CVE-2026-34754

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206
https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc
https://mantisbt.org/bugs/view.php?id=36976

Configurations

No configuration.

History

24 Jul 2026, 09:10

Type	Values Removed	Values Added
Summary		(es) Mantis Bug Tracker (MantisBT) es un rastreador de problemas de código abierto. Las versiones 2.28.1 y anteriores permiten a un usuario autenticado subir archivos adjuntos a incidencias privadas a las que no están autorizados a acceder. Este problema ha sido corregido en la versión 2.28.2.

20 May 2026, 00:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-20 00:16

Updated : 2026-07-24 09:10

NVD link : CVE-2026-34754

Mitre link : CVE-2026-34754

CVE.ORG link : CVE-2026-34754

JSON object : View

Products Affected

No product.

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-34754", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34754", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-20T15:07:20.317286Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "mantisbt", "product": "mantisbt", "versions": [{"status": "affected", "version": "< 2.28.2"}]}]}], "published": "2026-05-20T00:16:34.857", "references": [{"url": "https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206", "source": "security-advisories@github.com"}, {"url": "https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc", "source": "security-advisories@github.com"}, {"url": "https://mantisbt.org/bugs/view.php?id=36976", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2."}, {"lang": "es", "value": "Mantis Bug Tracker (MantisBT) es un rastreador de problemas de c\u00f3digo abierto. Las versiones 2.28.1 y anteriores permiten a un usuario autenticado subir archivos adjuntos a incidencias privadas a las que no est\u00e1n autorizados a acceder. Este problema ha sido corregido en la versi\u00f3n 2.28.2."}], "lastModified": "2026-07-24T09:10:00.153", "sourceIdentifier": "security-advisories@github.com"}