Vulnerabilities

Filters

1 selected

145 records

Sort

Vendor: mantisbt Clear all filters

TI-2026-34746 CVE-2026-47156 · GHSA-c2xg-qjqw-2v98

MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

MEDIUM 49

MantisBT is an open source bug tracker.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00686 Published 2026-09-09 Fixed in 2.28.4 CWE-287

TI-2026-30439 CVE-2026-42071 · GHSA-pw5x-2mf9-3xc8

MantisBT: Private Bugnote Attachment Content Leak via REST API

LOW 37

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.0026 Published 2026-05-28 Fixed in 2.28.2 CWE-862

TI-2026-30438 CVE-2026-42070 · GHSA-pq86-j2c2-47f6

MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API

LOW 24

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00258 Published 2026-05-28 Fixed in 2.28.2 CWE-863

TI-2026-32555 CVE-2026-44655 · GHSA-7mqj-8gj2-cg59

MantisBT: Stored XSS on Move Attachments Admin Page

LOW 39

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00298 Published 2026-05-28 Fixed in 2.28.2 CWE-79

TI-2026-30299 CVE-2026-41897 · GHSA-j7v9-f46r-2rp4

MantisBT: Reflected XSS in Rendering Dynamic Custom Textarea Field

LOW 24

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-05-28 Fixed in 2.28.2 CWE-79

TI-2026-32557 CVE-2026-44657 · GHSA-p6fr-rxq7-xcg8

MantisBT: Stored XSS in File Download

LOW 35

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 7.5 Network Low privileges User interaction EPSS 0.00349 Published 2026-05-28 Fixed in 2.28.2 CWE-79

TI-2026-29343 CVE-2026-40607 · GHSA-f633-865q-2mhh

MantisBT is Vulnerable to Stored XSS Through its Saved-Filter Owner Column

LOW 35

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00419 Published 2026-05-22 Fixed in 2.28.2 CWE-79

TI-2026-29334 CVE-2026-40598 · GHSA-6jh4-47v2-4g37

MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page

MEDIUM 64

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00447 Published 2026-05-22 Fixed in 2.28.2 CWE-79

TI-2026-29333 CVE-2026-40597 · GHSA-9c3j-xm6v-j7j3

MantisBT has a Content Security Policy bypass via attachments

LOW 34

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00498 Published 2026-05-22 Fixed in 2.28.2 CWE-358

TI-2026-29332 CVE-2026-40596 · GHSA-j3v9-553h-x28j

MantisBT is vulnerable to XSS and potential account takeover via user font family preference update

LOW 32

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 7.2 Network Low privileges User interaction EPSS 0.00424 Published 2026-05-22 Fixed in 2.28.2 CWE-79

TI-2026-28816 CVE-2026-39960 · GHSA-qj6w-v29q-4rgx

MantisBT is Vulnerable to Stored XSS through Custom Field Textarea Values

LOW 24

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0023 Published 2026-05-20 Fixed in 2.28.2 CWE-79

TI-2026-27192 CVE-2026-34970 · GHSA-crmx-4p49-46m2

MantisBT Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked

MEDIUM 63

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00372 Published 2026-05-19 Fixed in 2.28.2 CWE-200

TI-2026-26998 CVE-2026-34754 · GHSA-h4x5-gvx6-3rwc

MantisBT allows unauthorized users to upload attachments to restricted issues via REST API

LOW 20

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00248 Published 2026-05-19 Fixed in 2.28.2 CWE-284

TI-2026-26988 CVE-2026-34744 · GHSA-rmp5-5jj7-gmvf

MantisBT authorization bypass allows continued access to self-uploaded attachments on private issues

LOW 24

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00362 Published 2026-05-19 Fixed in 2.28.2 CWE-200

TI-2026-26827 CVE-2026-34579 · GHSA-ggw7-9675-6v4v

MantisBT has an authorization bypass via private issue monitoring

LOW 24

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00363 Published 2026-05-19 Fixed in 2.28.2 CWE-200

TI-2026-26728 CVE-2026-34463 · GHSA-fvjf-68wh-rwp2

MantisBT has Stored HTML Injection/XSS via Clone Issue Form

MEDIUM 40

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00444 Published 2026-05-19 Fixed in 2.28.2 CWE-79

TI-2026-26676 CVE-2026-34390 · GHSA-frf7-jhp9-jxm6

MantisBT: Privilege Escalation from Manager to Administrator

MEDIUM 62

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00427 Published 2026-05-19 Fixed in 2.28.2 CWE-284

TI-2026-25495 CVE-2026-33052 · GHSA-68w5-w573-q2r8

MantisBT: Authorization Bypass in Global Profile Creation

MEDIUM 63

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0034 Published 2026-05-19 Fixed in 2.28.2 CWE-639

TI-2026-25939 CVE-2026-33548 · GHSA-73vx-49mv-v8w5

MantisBT has Stored HTML Injection / XSS when displaying Tags in Timeline

LOW 39

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00199 Published 2026-03-23 Fixed in 2.28.2 CWE-79

TI-2026-25913 CVE-2026-33517 · GHSA-fh48-f69w-7vmp

MantisBT Vulnerable to Stored HTML Injection in Tag Delete Confirmation

LOW 39

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00247 Published 2026-03-23 Fixed in 2.28.1 CWE-79

TI-2026-23678 CVE-2026-30849 · GHSA-phrq-pc6r-f6gh

MantisBT SOAP API has an authentication bypass vulnerability on MySQL

MEDIUM 52

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0176 Published 2026-03-23 Fixed in 2.28.1 CWE-305

TI-2025-38760 CVE-2025-62520 · GHSA-g582-8vwr-68h2

MantisBT unauthorized disclosure of private project column configuration

MEDIUM 57

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00264 Published 2025-11-04 Fixed in 2.27.2 CWE-285

TI-2025-34837 CVE-2025-55155 · GHSA-q747-c74m-69pr

MantisBT: Authentication bypass for some passwords due to PHP type juggling

LOW 24

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00163 Published 2025-11-04 Fixed in 2.27.2 CWE-201

TI-2025-30241 CVE-2025-47776 · GHSA-4v8w-gg5j-ph37

MantisBT: Authentication bypass for some passwords due to PHP type juggling

MEDIUM 44

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00345 Published 2025-11-04 Fixed in 2.27.2 CWE-305

TI-2025-29273 CVE-2025-46556 · GHSA-r3jf-hm7q-qfw5

MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Length

LOW 33

Mantis Bug Tracker (MantisBT) is an open source issue tracker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2025-11-04 Fixed in 2.27.2 CWE-770