mantis

• Author: kikadf
• Vulnerable: 1.2.8-2arcturus1
• Unaffected: 1.2.8-2arcturus2

Mantis suffers from a null byte poisoning issue when LDAP authentication is used.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6387