CVE-2020-28413

Published: Dec 30, 2020

Modified: Aug 4, 2024

PUBLISHED

CVSS v3.1

5.3

MEDIUM

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

CVSS v3.1 Vector

CVSS:3.1/AC:H/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N

Attack Complexity

High

Attack Vector

Network

Availability

None

Confidentiality

High

Integrity

None

Privileges Required

Low

Scope

Unchanged

User Interaction

None

x_refsource_MISC

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.