CVE-2020-36192

An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private Project), if they are attached to an existing Changeset. The information is visible on the view.php page, as well as on the list.php page (a pop-up on the Affected Issues id hyperlink). Additionally, if the attacker has "Update threshold" in the plugin's configuration (set to the "updater" access level by default), then they can link any Issue to a Changeset by entering the Issue's Id, even if they do not have access to it.

• https://github.com/mantisbt-plugins/source-integration/issues/344Exploit, Third Party Advisory
• https://github.com/mantisbt-plugins/source-integration/issues/344Exploit, Third Party Advisory

Published

Jan 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36187FasterXML jackson-databind 2.x before 2.9.10.8 mishandles th…8.1
• CVE-2020-36188FasterXML jackson-databind 2.x before 2.9.10.8 mishandles th…8.1
• CVE-2020-36189FasterXML jackson-databind 2.x before 2.9.10.8 mishandles th…8.1
• CVE-2020-3619u'Non-secure memory is touched multiple times during TrustZo…7
• CVE-2020-36190RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0…6.1
• CVE-2020-36191JupyterHub 1.1.0 allows CSRF in the admin panel via a reques…4.5
• CVE-2020-36193Tar.php in Archive_Tar through 1.4.11 allows write operation…7.5
• CVE-2020-36194An XSS vulnerability has been reported to affect QNAP NAS ru…6.1
• CVE-2020-36195An SQL injection vulnerability has been reported to affect Q…9.8
• CVE-2020-36196A stored XSS vulnerability has been reported to affect QNAP …6.1
• CVE-2020-36197An improper access control vulnerability has been reported t…8.8
• CVE-2020-36198A command injection vulnerability has been reported to affec…6.7