description: An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
problem types: Other
affected:
{
product: mantis
vendor: mantis
versions:
status: affected, version: 1.2.13
}