{"id":"CVE-2018-6526","details":"view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filter_ensure_valid_filter call in current_user_api.php.","modified":"2026-07-08T20:04:50.667884Z","published":"2018-02-02T09:29:00.320Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/103065"},{"type":"ADVISORY","url":"https://mantisbt.org/bugs/view.php?id=23921"},{"type":"FIX","url":"https://github.com/mantisbt/mantisbt/commit/de686a9e6d8c909485b87ca09c8f912bf83082f2"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mantisbt/mantisbt","events":[{"introduced":"0"},{"last_affected":"9717433ba87f758c57a53e22f533f6d252adb624"},{"fixed":"de686a9e6d8c909485b87ca09c8f912bf83082f2"}],"database_specific":{"cpe":"cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.10.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["release-2.10.0","release-2.9.0","release-2.8.0","release-2.7.0","release-2.6.0","release-2.5.0","release-2.4.0","release-2.3.0","release-2.2.0","release-2.1.0","release-2.0.0","release-2.0.0-rc.2","release-2.0.0-rc.1","release-2.0.0-beta.3","release-2.0.0-beta.2","release-2.0.0-beta.1","release-1.3.0-rc.2","release-1.3.0-rc.1","release-1.3.0-beta.3","release-1.3.0-beta.2","release-1.3.0-beta.1","release-1.2.0rc1","release-1.2.0a3","release-1.2.0a2","release-1.2.0a1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-6526.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}