CVE-2002-1116
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of...
CVE-2002-1116 is a high vulnerability (CVSS 7.5) in Mantis, published September 4, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.36%, the 71st percentile. Fixed in mantis 0.17.1-2.5.
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
Exploit likelihood
What each source reports
NVD Score used
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
- Record
CVE-2002-1116- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
- Record
CVE-2002-1116- Updated
- 2026-11-02
EUVDEUVD-2002-1104 No score
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
- Record
EUVD-2002-1104- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-prr4-c7f2-m66w No score
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of...
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
- Record
GHSA-prr4-c7f2-m66w- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mantisDebian:3.0 |
before 0.17.1-2.5 | 0.17.1-2.5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |