PT-2024-20110 · Mantisbt · Mantisbt

Name of the Vulnerable Software and Affected Versions: MantisBT versions prior to 2.26.1 Description: MantisBT is an open source issue tracker. An unauthenticated attacker who knows a user's email address and username can hijack the user's account by poisoning the link in the password reset...