oss-sec mailing list archives

Re: CVE request: MantisBT before 1.2.13 "Change Status To" feature allows unauthorised workflow changes

From: Damien Regad <damien.regad () merckgroup com>
Date: Mon, 4 Mar 2013 16:47:26 +0000 (UTC)

Kurt Seifried <kseifried@...> writes:

Please use CVE-2013-1811 for this issue.


Thanks. The corresponding Mantis issue has been updated accordingly.

regarding the past email ctrl-c, ctrl-v, same thing right?


Not sure what you mean by that

Current thread:

CVE request: MantisBT before 1.2.13 "Change Status To" feature allows unauthorised workflow changes David Hicks (Jan 18)
- Re: CVE request: MantisBT before 1.2.13 "Change Status To" feature allows unauthorised workflow changes Salvatore Bonaccorso (Mar 01)
  - Re: CVE request: MantisBT before 1.2.13 "Change Status To" feature allows unauthorised workflow changes Kurt Seifried (Mar 02)
  - Re: CVE request: MantisBT before 1.2.13 "Change Status To" feature allows unauthorised workflow changes Kurt Seifried (Mar 02)
    - Re: CVE request: MantisBT before 1.2.13 "Change Status To" feature allows unauthorised workflow changes Damien Regad (Mar 04)