CVE-2012-1119
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier...
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
Exploit likelihood
What each source reports
NVD Score used
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
- Record
CVE-2012-1119- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
- Record
CVE-2012-1119- Updated
- 2026-11-02
EUVDEUVD-2012-1153 No score
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
- Record
EUVD-2012-1153- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8rvq-6w77-33qx No score
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier...
MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
- Record
GHSA-8rvq-6w77-33qx- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mantisDebian:6.0 |
before 1.1.8+dfsg-10squeeze2, plus listed versions 1.1.8+dfsg-101.1.8+dfsg-10squeeze1 |
1.1.8+dfsg-10squeeze2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1119 is a medium vulnerability (CVSS 6.4) in Mantisbt, published June 24, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.62%, the 89th percentile. Fixed in mantis 1.1.8+dfsg-10squeeze2.
References
securityfocus.com/bid/52313
lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html
debian.org/security/2012/dsa-2500
security.gentoo.org/glsa/glsa-201211-01.xml
mantisbt.org/bugs/view.php?id=13816
Show 10 moreShow less
secunia.com/advisories/49572
openwall.com/lists/oss-security/2012/03/06/9
github.com/mantisbt/mantisbt/commit/dea7e315f3fc96dfa995e56e8810845fc07a47aa
nvd.nist.gov/vuln/detail/CVE-2012-1119