Priority HIGH 81
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.91196 · Published 2017-04-16 · Fixed in 1.3.10, 2.2.4 +1 CWE-640
Priority MEDIUM 64
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00447 · Published 2026-05-22 · Fixed in 2.28.2 CWE-79
Priority MEDIUM 64
The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.50561 · Published 2014-11-18 · No fix listed CWE-20
Priority MEDIUM 63
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2026-05-19 · Fixed in 2.28.2 CWE-200
Priority MEDIUM 63
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2026-05-19 · Fixed in 2.28.2 CWE-639
Priority MEDIUM 62
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00427 · Published 2026-05-19 · Fixed in 2.28.2 CWE-284
Priority MEDIUM 57
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00264 · Published 2025-11-04 · Fixed in 2.27.2 CWE-285
Priority MEDIUM 57
A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted 'config_option'…
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.63335 · Published 2017-03-31 · Fixed in 1.3.9, 2.1.3 +1 CWE-79
Priority MEDIUM 55
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.30003 · Published 2019-10-09 · Fixed in 1.3.20, 2.22.1 CWE-78
Priority MEDIUM 55
The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page.
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.38463 · Published 2014-11-18 · No fix listed CWE-19
Priority MEDIUM 53
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00608 · Published 2023-02-23 · Fixed in 2.25.6 CWE-200
Priority MEDIUM 52
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0176 · Published 2026-03-23 · Fixed in 2.28.1 CWE-305
Priority MEDIUM 49
MantisBT is an open source bug tracker.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00686 · Published 2026-09-09 · Fixed in 2.28.4 CWE-287
Priority MEDIUM 45
The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if CSP settings permit it) after uploading an attachment wi…
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02067 · Published 2019-08-21 · Fixed in 2.21.2 CWE-79
Priority MEDIUM 44
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00345 · Published 2025-11-04 · Fixed in 2.27.2 CWE-305
Priority MEDIUM 42
SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitrary SQL commands via the filter_config_id…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.11311 · Published 2014-03-05 · No fix listed CWE-89
Priority MEDIUM 42
Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to include and execute arbitrary local files via a ..
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.09296 · Published 2011-09-21 · No fix listed CWE-22
Priority MEDIUM 40
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00444 · Published 2026-05-19 · Fixed in 2.28.2 CWE-79
Priority MEDIUM 40
MantisBT (Mantis Bug Tracker) is an open source issue tracker.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01186 · Published 2024-05-13 · Fixed in 2.26.2 CWE-305
Priority LOW 39
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00298 · Published 2026-05-28 · Fixed in 2.28.2 CWE-79
Priority LOW 39
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0HIGH 8.6· Network · Low privileges · User interaction · EPSS 0.00199 · Published 2026-03-23 · Fixed in 2.28.2 CWE-79
Priority LOW 39
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
CVSS 4.0HIGH 8.6· Network · Low privileges · User interaction · EPSS 0.00247 · Published 2026-03-23 · Fixed in 2.28.1 CWE-79
Priority LOW 39
The current_user_get_bug_filter function in core/current_user_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary PHP code via the filter parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03145 · Published 2014-12-08 · No fix listed CWE-94
Priority LOW 39
The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03785 · Published 2012-06-17 · No fix listed CWE-264
Priority LOW 39
The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03685 · Published 2012-06-29 · No fix listed CWE-287
Load more
THREATIST.IORead the docs