CVE-2023-44394

MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects' names, by accessing wiki.php with sequentially incremented IDs. This issue has been addressed in commit `65c44883f` which has been included in release `2.25.8`. Users are advised to upgrade. Users unable to upgrade should disable wiki integration ( `$g_wiki_enable = OFF;`).

• CWE-200
• CWE-668

• https://github.com/mantisbt/mantisbt/commit/65c44883f9d24f3ccef066fb523c93d8fdd7afc1Patch
• https://github.com/mantisbt/mantisbt/security/advisories/GHSA-v642-mh27-8j6mVendor Advisory
• https://mantisbt.org/bugs/view.php?id=32981Vendor Advisory
• https://github.com/mantisbt/mantisbt/commit/65c44883f9d24f3ccef066fb523c93d8fdd7afc1Patch
• https://github.com/mantisbt/mantisbt/security/advisories/GHSA-v642-mh27-8j6mVendor Advisory
• https://mantisbt.org/bugs/view.php?id=32981Vendor Advisory

Published

Oct 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-44389Zope is an open-source web application server. The title pro…4.8
• CVE-2023-4439A vulnerability was found in SourceCodester Card Holder Mana…5.3
• CVE-2023-44390HtmlSanitizer is a .NET library for cleaning HTML fragments …6.1
• CVE-2023-44391Discourse is an open source platform for community discussio…5.3
• CVE-2023-44392Garden provides automation for Kubernetes development and te…9
• CVE-2023-44393Piwigo is an open source photo gallery application. Prior to…6.1
• CVE-2023-44395Autolab is a course management service that enables instruct…6.5
• CVE-2023-44396iTop is an IT service management platform. Dashlet edits aj…5.4
• CVE-2023-44397CloudExplorer Lite is an open source, lightweight cloud mana…9.8
• CVE-2023-44398Exiv2 is a C++ library and a command-line utility to read, w…8.8
• CVE-2023-44399ZITADEL provides identity infrastructure. In versions 2.37.2…5.3
• CVE-2023-4440A vulnerability was found in SourceCodester Free Hospital Ma…9.8