MEDIUM
GHSA-crmx-4p49-46m2
MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked
Quick fix
GHSA-crmx-4p49-46m2 — mantisbt/mantisbt: upgrade to the fixed version with the command below.
composer require mantisbt/mantisbt:^2.28.2Details
MantisBT allows a bugnote author to access the note's Revisions page after losing access to the parent private issue.
### Impact Disclosure of the private Issue's Id and Summary. The bugnote full revision body remains secure.
### Patches - 71df1f67e05b2050cd4bd87839e6cc13747cf03f
### Workarounds None
### Credits Thanks to Vishal Shukla for discovering and responsibly reporting the issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/mantisbt/mantisbt
Introduced in:
0Fixed in: 2.28.2Fix
composer require mantisbt/mantisbt:^2.28.2References
- https://github.com/mantisbt/mantisbt/security/advisories/GHSA-crmx-4p49-46m2[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2026-34970[ADVISORY]
- https://github.com/mantisbt/mantisbt/commit/71df1f67e05b2050cd4bd87839e6cc13747cf03f[WEB]
- https://github.com/mantisbt/mantisbt[PACKAGE]
- https://mantisbt.org/bugs/view.php?id=36978[WEB]