CVE-2002-1115: Mantis

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) bug_update_advanced_page.php, (2) bug_update_page.php, (3) view_bug_advanced_page.php, or (4) view_bug_page.php.

Affected products

• Mantis Mantis: version 0.17.0 only; version 0.17.1 only; version 0.17.2 only; version 0.17.3 only; version 0.17.4 only; version 0.17.4a only

Published 2002-10-04. Last modified 2026-06-16.