CVE-2026-33052
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Mantis Bug Tracker versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user to create a global profile by tampering with the user_id parameter, bypassing required permissions.
Risk Assessment
A user with add_profile_threshold permission can escalate privileges by creating global profiles without proper authorization.
Recommendation
Update MantisBT to version 2.28.2 which fixes the issue.
Original NVD description (English source)
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user assigned the "add_profile_threshold" permission to create a global profile despite not having manage_global_profile_threshold, by tampering with the user_id parameter in a valid profile creation request. This issue has been fixed in version 2.28.2.