{"action":"Upgrade mantisbt/mantisbt to 2.25.6 or later.","affected":[{"fixed":"2.25.6","introduced":"0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2023-22476"],"ecosystem":"Packagist","epss":0.00608,"exploited":false,"fixed_versions":["2.25.6"],"ghsa_id":"GHSA-hf4x-6h87-hm79","id":"tcs_01M5KF3K8CMQ4MR0ES0R7CPB70","modified_at":"2024-02-16T08:20:22.774504Z","published_at":"2023-02-23T19:39:54Z","references":["https://osv.dev/vulnerability/GHSA-hf4x-6h87-hm79","https://github.com/mantisbt/mantisbt/security/advisories/GHSA-hf4x-6h87-hm79","https://github.com/mantisbt/mantisbt","https://mantisbt.org/bugs/view.php?id=31086"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-hf4x-6h87-hm79","url":"https://osv.dev/vulnerability/GHSA-hf4x-6h87-hm79"}],"summary":"MantisBT may expose private issues' summaries to unauthorized users"}