CVE-2002-1112: Mantis

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.

Affected products

• Mantis Mantis: version 0.15.3 only; version 0.15.4 only; version 0.15.5 only; version 0.15.6 only; version 0.15.7 only; version 0.15.8 only; …

Published 2002-10-04. Last modified 2026-06-16.