CVE-2013-1883

EUVD-2013-1882
Mantis Bug Tracker (aka MantisBT) 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service (resource consumption) via a filter using a criteria, text search, and the "any condition" match type.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
Affected Products (NVD)
VendorProductVersion
mantisbtmantisbt
1.2.12
mantisbtmantisbt
1.2.13
mantisbtmantisbt
1.2.14
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mantis
hardy
not-affected
lucid
not-affected
oneiric
not-affected
precise
not-affected
quantal
not-affected
Common Weakness Enumeration
References
http://www.mantisbt.org/bugs/view.php?id=15573
http://www.openwall.com/lists/oss-security/2013/03/22/2
http://www.securityfocus.com/bid/58626
https://bugzilla.redhat.com/show_bug.cgi?id=924340
https://exchange.xforce.ibmcloud.com/vulnerabilities/83347
https://github.com/mantisbt/mantisbt/commit/d16988c3ca232a7
http://www.mantisbt.org/bugs/view.php?id=15573
http://www.openwall.com/lists/oss-security/2013/03/22/2
http://www.securityfocus.com/bid/58626
https://bugzilla.redhat.com/show_bug.cgi?id=924340
https://exchange.xforce.ibmcloud.com/vulnerabilities/83347
https://github.com/mantisbt/mantisbt/commit/d16988c3ca232a7