Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2013-1811

created 2 months ago Activity log

Created suggestion 2 months ago

An access control issue in MantisBT before 1.2.13 allows users …

An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".

References

https://security-tracker.debian.org/tracker/CVE-2013-1811 x_transferredx_refsource_MISC
http://www.debian.org/security/2015/dsa-3120 x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/03/03/6 x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/03/04/9 x_transferredx_refsource_MISC
https://mantisbt.org/bugs/view.php?id=15258 x_refsource_CONFIRMx_transferred

Affected products

mantis

==1.2.13

Matching in nixpkgs

pkgs.haskellPackages.Mantissa

Reals in the interval [0,1), as machine words

nixos-unstable 0.1.0.0
- nixpkgs-unstable 0.1.0.0
- nixos-unstable-small 0.1.0.0
nixos-25.11 0.1.0.0
- nixos-25.11-small 0.1.0.0
- nixpkgs-25.11-darwin 0.1.0.0