CVE-2012-5523

CVE-2012-5523 describes a vulnerability in MantisBT versions prior to 1.2.12, where the email notification system for restricted bugs could inadvertently disclose sensitive information. An authenticated attacker could add a note to a bug, then lose permission to view it, yet still receive email notifications containing details about the restricted bug. This medium-severity vulnerability has a CVSS score of 5.5, indicating a network-based attack with low access complexity, requiring authentication to achieve partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.