Design/Logic Flaw

2024-02-2022:15:00

PRIOn knowledge base

www.prio-n.com

mantisbt

open source

issue tracker

vulnerability

account hijack

password reset

patch

workaround

version 2.26.1

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

JSON

MantisBT is an open source issue tracker. Prior to version 2.26.1, an unauthenticated attacker who knows a user’s email address and username can hijack the user’s account by poisoning the link in the password reset notification message. A patch is available in version 2.26.1. As a workaround, define $g_path as appropriate in config_inc.php.