An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
| Software | From | Fixed in |
|---|---|---|
mantisbt / mantisbt
|
- | 1.2.13 |
| debian / debian_linux | 7.0 | 7.0.x |
| debian / debian_linux | 6.0 | 6.0.x |