Skip to content
OpenAdvisories

Package · Packagist

mantisbt/mantisbt

74 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2019-15715 Public exploit EPSS 30%

    MantisBT Remote Code Execution

    MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

    mantisbt/mantisbt Packagist
  • High 8.8
    CVE-2017-7615 Public exploit Scanner template EPSS 91%

    MantisBT allows arbitrary password reset

    MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.

    mantisbt/mantisbt Packagist