CVE-2002-1116: Mantis

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.

Affected products

• Mantis Mantis: version 0.17.0 only; version 0.17.1 only; version 0.17.2 only; version 0.17.3 only; version 0.17.4 only; version 0.17.4a only

Published 2002-10-04. Last modified 2026-06-16.