CVE-2006-6515: Mantis

High severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.

Affected products

• Mantis Mantis: up to and including 1.1.0a1; version 1.0.0 only; version 1.0.0_rc1 only; version 1.0.0_rc2 only; version 1.0.0_rc3 only; version 1.0.0_rc4 only; …

Published 2006-12-14. Last modified 2026-06-16.