Security
فارسی
All products

mantisbt/mantisbt

Composer · Package
74 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
MantisBT Vulnerable to Stored XSS in File DownloadCVE-2026-44657 · GHSA-P6FR-RXQ7-XCG8 mantisbt/mantisbt Composer High Fix reported
MantisBT has a Private Bugnote Attachment Content Leak via REST APICVE-2026-42071 · GHSA-PW5X-2MF9-3XC8 mantisbt/mantisbt Composer High Fix reported
MantisBT is Vulnerable to Stored XSS in Custom Field Textarea ValuesCVE-2026-39960 · GHSA-QJ6W-V29Q-4RGX mantisbt/mantisbt Composer Medium Fix reported
MantisBT is Vulnerable to Stored XSS in Saved-Filter Owner ColumnCVE-2026-40607 · GHSA-F633-865Q-2MHH mantisbt/mantisbt Composer High Fix reported
MantisBT has a Content Security Policy bypass via attachmentsCVE-2026-40597 · GHSA-9C3J-XM6V-J7J3 mantisbt/mantisbt Composer High Fix reported
MantisBT is Vulnerable to XSS leading to account takeover via updating a user's font family preferenceCVE-2026-40596 · GHSA-J3V9-553H-X28J mantisbt/mantisbt Composer High Fix reported
MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is RevokedCVE-2026-34970 · GHSA-CRMX-4P49-46M2 mantisbt/mantisbt Composer Medium Fix reported
MantisBT has an authorization bypass in private issue monitoringCVE-2026-34579 · GHSA-GGW7-9675-6V4V mantisbt/mantisbt Composer Medium Fix reported
MantisBT is Vulnerable to Stored HTML Injection/XSS in Clone Issue FormCVE-2026-34463 · GHSA-FVJF-68WH-RWP2 mantisbt/mantisbt Composer High Fix reported
MantisBT Vulnerable to Privilege Escalation from Manager to AdministratorCVE-2026-34390 · GHSA-FRF7-JHP9-JXM6 mantisbt/mantisbt Composer Medium Fix reported
MantisBT: Authorization Bypass in Bugnote Editing via Issue Update APICVE-2026-42070 · GHSA-PQ86-J2C2-47F6 mantisbt/mantisbt Composer Medium Fix reported
MantisBT is Vulnerable to Reflected XSS in Rendering Dynamic Custom Textarea FieldCVE-2026-41897 · GHSA-J7V9-F46R-2RP4 mantisbt/mantisbt Composer Medium Fix reported
MantisBT has an authorization bypass that allows reading attachments after losing access to a private issueCVE-2026-34744 · GHSA-RMP5-5JJ7-GMVF mantisbt/mantisbt Composer Medium Fix reported
MantisBT has Stored XSS on Move Attachments Admin PageCVE-2026-44655 · GHSA-7MQJ-8GJ2-CG59 mantisbt/mantisbt Composer High Fix reported
MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST APICVE-2026-34754 · GHSA-H4X5-GVX6-3RWC mantisbt/mantisbt Composer Medium Fix reported
MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update PageCVE-2026-40598 · GHSA-6JH4-47V2-4G37 mantisbt/mantisbt Composer Medium Fix reported
MantisBT Has Authorization Bypass in Global Profile CreationCVE-2026-33052 · GHSA-68W5-W573-Q2R8 mantisbt/mantisbt Composer Medium Fix reported
Mantis Bug Tracker (MantisBT) vulnerable to cross-site scripting CVE-2024-34081 · GHSA-WGX7-JP56-65MQ mantisbt/mantisbt Composer Medium Fix reported
MantisBT Host Header Injection vulnerabilityCVE-2024-23830 · GHSA-MCQJ-7P29-9528 mantisbt/mantisbt Composer High Fix reported
MantisBT may disclose project names to unauthorized users CVE-2023-44394 · GHSA-V642-MH27-8J6M mantisbt/mantisbt Composer Medium Fix reported