Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.
Software | From | Fixed in |
---|---|---|
mantis / mantis | 0.19.0 | 0.19.0.x |
mantis / mantis | 0.19.0_rc1 | 0.19.0_rc1.x |
mantis / mantis | 0.19.0a1 | 0.19.0a1.x |
mantis / mantis | 0.19.0a2 | 0.19.0a2.x |
mantis / mantis | 0.19.1 | 0.19.1.x |
mantis / mantis | 0.19.2 | 0.19.2.x |
mantis / mantis | 0.19.3 | 0.19.3.x |