MantisBT allows arbitrary password reset

🗓️ 13 May 2022 01:16:08Reported by GitHub Advisory DatabaseType

MantisBT versions up to 2.3.0 allow unauthorized password resets and unauthenticated admin access.

Reporter	Title	Published	Views	Family All 22
0day.today	Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset Exploit	17 Apr 201700:00	–	zdt
Circl	CVE-2017-7615	16 Apr 201700:00	–	circl
CNVD	MantisBT Arbitrary Password Reset Vulnerability	18 Apr 201700:00	–	cnvd
Check Point Advisories	Mantis Bug Tracker verify.php confirm_hash Remote Password Reset (CVE-2017-7615)	15 May 201700:00	–	checkpoint_advisories
CVE	CVE-2017-7615	16 Apr 201714:45	–	cve
Cvelist	CVE-2017-7615	16 Apr 201714:45	–	cvelist
Exploit DB	Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset	16 Apr 201700:00	–	exploitdb
Exploit DB	Mantis Bug Tracker 2.3.0 - Remote Code Execution (Unauthenticated)	18 Sep 202000:00	–	exploitdb
exploitpack	Mantis Bug Tracker 1.3.02.3.0 - Password Reset	16 Apr 201700:00	–	exploitpack
Metasploit	MantisBT password reset	9 Jul 201700:14	–	metasploit

Vulners

Node

mantisbt mantisbtRange2.3.0–2.3.1composer

mantisbt mantisbtRange2.0.0–2.2.4composer

mantisbt mantisbtRange1.3.0-rc.2–1.3.10composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-7615
mantisbt	www.mantisbt.org/bugs/view.php
hyp3rlinx	www.hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-PRE-AUTH-REMOTE-PASSWORD-RESET.txt
packetstormsecurity	www.packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html
openwall	www.openwall.com/lists/oss-security/2017/04/16/2
securityfocus	www.securityfocus.com/bid/97707
exploit-db	www.exploit-db.com/exploits/41890
github	www.github.com/advisories/GHSA-252r-f55f-ff34

22 Apr 2025 17:43Current

7.5High risk

Vulners AI Score7.5

CVSS 26.5

CVSS 3.18.8

EPSS0.92451