CVE-2002-1111: Mantis

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted.

Affected products

• Mantis Mantis: version 0.16.0 only; version 0.16.1 only; version 0.17.0 only; version 0.17.1 only; version 0.17.2 only; version 0.17.3 only

Published 2002-10-04. Last modified 2026-06-16.