ByteOS Network

NVD Vulnerability Details :

CVE-2026-34754

Received

Source-security-advisories@github.com

Published At-20 May, 2026 | 00:16

Updated At-20 May, 2026 | 00:16

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Type: Secondary

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses

CWE ID	Type	Source
CWE-284	Primary	security-advisories@github.com

CWE ID: CWE-284

Type: Primary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206	security-advisories@github.com	N/A
https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc	security-advisories@github.com	N/A
https://mantisbt.org/bugs/view.php?id=36976	security-advisories@github.com	N/A