Search for packages
| purl | pkg:composer/mantisbt/mantisbt@2.28.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-j7v9-f46r-2rp4
Aliases: CVE-2026-41897 |
MantisBT is Vulnerable to Reflected XSS in Rendering Dynamic Custom Textarea Field Lack of validation of filter_target parameter on return_dynamic_filters.php … |
Vulnerable |
|
GHSA-rmp5-5jj7-gmvf
Aliases: CVE-2026-34744 |
MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue MantisBT permits a user … |
Vulnerable |
|
GHSA-frf7-jhp9-jxm6
Aliases: CVE-2026-34390 |
MantisBT Vulnerable to Privilege Escalation from Manager to Administrator Insufficient access control checks in _ProjectUsersAddCommand_ (used in *manage_proj_user_add.php* and REST … |
Vulnerable |
|
GHSA-qj6w-v29q-4rgx
Aliases: CVE-2026-39960 |
MantisBT is Vulnerable to Stored XSS in Custom Field Textarea Values Improper escaping of a textarea custom field's contents in … |
Vulnerable |
|
GHSA-68w5-w573-q2r8
Aliases: CVE-2026-33052 |
MantisBT Has Authorization Bypass in Global Profile Creation MantisBT allows a low-privileged authenticated user having *add_profile_threshold* to create a global … |
Vulnerable |
|
GHSA-h4x5-gvx6-3rwc
Aliases: CVE-2026-34754 |
MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API ### Impact MantisBT allows an … |
Vulnerable |
|
GHSA-pq86-j2c2-47f6
Aliases: CVE-2026-42070 |
MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API The mc_issue_update() function in MantisBT allows users having *update_bug_threshold* access … |
Vulnerable |
|
GHSA-6jh4-47v2-4g37
Aliases: CVE-2026-40598 |
MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page Improper escaping of the redirection page (retrieved … |
Vulnerable |
|
GHSA-crmx-4p49-46m2
Aliases: CVE-2026-34970 |
MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked MantisBT allows a bugnote author to access … |
Vulnerable |
|
GHSA-fvjf-68wh-rwp2
Aliases: CVE-2026-34463 |
MantisBT is Vulnerable to Stored HTML Injection/XSS in Clone Issue Form When cloning an issue originating from a Project other … |
Vulnerable |
|
GHSA-p6fr-rxq7-xcg8
Aliases: CVE-2026-44657 |
MantisBT Vulnerable to Stored XSS in File Download Using *show_inline=1* parameter and a valid *file_show_inline_token* CSRF token on file_download.php, an … |
Vulnerable |
|
GHSA-9c3j-xm6v-j7j3
Aliases: CVE-2026-40597 |
MantisBT has a Content Security Policy bypass via attachments Given any pre-existing XSS / HTML injection vulnerability, an attacker can … |
Vulnerable |
|
GHSA-vcrw-4xvv-jh49
Aliases: CVE-2026-52881 |
MantisBT: Reflected XSS in admin/install.php via unescaped printf MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. … |
Not vulnerable |
|
GHSA-c2xg-qjqw-2v98
Aliases: CVE-2026-47156 |
MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator MantisBT 2.28.3 and earlier contains a critical authentication bypass in … |
Not vulnerable |
|
GHSA-mw6p-33vw-46cc
Aliases: CVE-2026-47142 |
MantisBT: SQL Injection via history_order Configuration Value MantisBT 2.28.3 and earlier versions contains a SQL injection vulnerability in core/history_api.php. The … |
Not vulnerable |
|
GHSA-77x8-3v3h-hrhv
Aliases: CVE-2026-52847 |
MantisBT: Reflected XSS in admin/install.php MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. User-supplied parameters are … |
Not vulnerable |
|
GHSA-h2wf-967x-gxvw
Aliases: CVE-2026-62944 |
MantisBT: Stored XSS in print_all_bug_page_word.php A missing output encoding call in print_all_bug_page_word.php allows any authenticated user to inject arbitrary HTML … |
Not vulnerable |
|
GHSA-3v2j-6fw9-f57c
Aliases: CVE-2026-52882 |
MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters ### Impact Users below _report_issues_for_unreleased_versions_threshold_ can assign … |
Not vulnerable |
|
GHSA-4vpf-w7qv-5h3q
Aliases: CVE-2026-52883 |
MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs Unvalidated note_type Parameter in mc_issue_update SOAP Endpoint Allows … |
Not vulnerable |
|
CVE-2026-33548
Aliases: GHSA-73vx-49mv-v8w5 |
MantisBT has Stored HTML Injection/XSS when displaying Tags in Timeline Improper escaping of tag names retrieved from History in Timeline … |
Vulnerable Vulnerable |
|
GHSA-f633-865q-2mhh
Aliases: CVE-2026-40607 |
MantisBT is Vulnerable to Stored XSS in Saved-Filter Owner Column Incorrect escaping of a saved filter's owner allows an attacker … |
Vulnerable Vulnerable |
|
GHSA-ggw7-9675-6v4v
Aliases: CVE-2026-34579 |
MantisBT has an authorization bypass in private issue monitoring Using a crafted POST request to bug_monitor_add.php, a user with project-level … |
Vulnerable Vulnerable |
|
GHSA-j3v9-553h-x28j
Aliases: CVE-2026-40596 |
MantisBT is Vulnerable to XSS leading to account takeover via updating a user's font family preference Any authenticated user can … |
Vulnerable Vulnerable |
|
GHSA-pw5x-2mf9-3xc8
Aliases: CVE-2026-42071 |
MantisBT has a Private Bugnote Attachment Content Leak via REST API A missing authorization check in MantisBT's file visibility function … |
Vulnerable Vulnerable |
|
GHSA-7mqj-8gj2-cg59
Aliases: CVE-2026-44655 |
MantisBT has Stored XSS on Move Attachments Admin Page Unescaped Project Name allows an attacker that can set it (which … |
Vulnerable Vulnerable |
|
GHSA-v84x-qvhg-f36r
Aliases: CVE-2026-49273 |
MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php MantisBT 2.28.3 and earlier contains a remote code execution vulnerability … |
Not vulnerable Not vulnerable |
|
GHSA-m7ph-9558-mrx3
Aliases: CVE-2026-49280 |
MantisBT: REST API unauthorized Issue status change A MantisBT user having *$g_update_bug_threshold* (UPDATER by default) can change an Issue's Status … |
Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-phrq-pc6r-f6gh
|
MantisBT is vulnerable to authentication bypass through the SOAP API on MySQL Mantis Bug Tracker instances running on MySQL and … |
CVE-2026-30849
|
|
GHSA-fh48-f69w-7vmp
|
MantisBT Vulnerable to Stored HTML Injection in Tag Delete Confirmation Improper escaping of Tag name when deleting it in tag_delete.php … |
CVE-2026-33517
|