CVE-2020-28413: Mantisbt

Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days.

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP.

Affected products

• Mantisbt Mantisbt: version 2.24.3 only

Published 2020-12-30. Last modified 2026-06-17.