[MEDIUM] MantisBT Missing Authorization access check in bug_actiongroup.php

PKSA-5kvg-vtwr-36w9 CVE-2020-29604 GHSA-f38c-wxp6-8xjv

Affected package: mantisbt/mantisbt

Affected version: <2.24.4

Reported by:
GitHub