Skip to content

CVE-2005-3338

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display...

5.0 MediumFix available

CVE-2005-3338 is a medium vulnerability (CVSS 5.0) in Mantis, published October 27, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.41%, the 72nd percentile. Fixed in mantis 0.19.2-4.1.

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.

Exploit likelihood

1.41%Up 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.

Record: CVE-2005-3338
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.

Record: CVE-2005-3338
Updated: 2026-11-02

EUVDEUVD-2005-3337 No score

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.

Record: EUVD-2005-3337
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fp3p-xjcp-hc73 No score

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display...

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.

Record: GHSA-fp3p-xjcp-hc73
Updated: 2026-11-02

Affected products

mantis

Affected packages

Affected packages
Package	Affected	Fixed
`mantis` Debian:3.1	before 0.19.2-4.1, plus listed versions 0.19.2-30.19.2-4	0.19.2-4.1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References