MantisBT up to 2.257 Private Project wiki.php g_wiki_enable information disclosure

Summaryinfo

A vulnerability identified as problematic has been detected in MantisBT up to 2.257. Impacted is an unknown function of the file wiki.php of the component Private Project Handler. This manipulation of the argument g_wiki_enable causes information disclosure. This vulnerability is registered as CVE-2023-44394. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic was found in MantisBT up to 2.257 (Bug Tracking Software). Affected by this vulnerability is some unknown functionality of the file wiki.php of the component Private Project Handler. The manipulation of the argument g_wiki_enable with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. The summary by CVE is:

MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects' names, by accessing wiki.php with sequentially incremented IDs. This issue has been addressed in commit `65c44883f` which has been included in release `2.258`. Users are advised to upgrade. Users unable to upgrade should disable wiki integration ( `$g_wiki_enable = OFF;`).

The weakness was published 10/17/2023 as GHSA-v642-mh27-8j6m. It is possible to read the advisory at github.com. This vulnerability is known as CVE-2023-44394 since 09/28/2023. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

By approaching the search of inurl:wiki.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 2.258 eliminates this vulnerability. Applying the patch 65c44883f9d24f3ccef066fb523c93d8fdd7afc1 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Bug Tracking Software

Name

• MantisBT

Version

• 2.257

License

• open-source

Website

• Product: https://github.com/mantisbt/mantisbt/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion