Lucene search
+L

1 matches found

OSV
OSV
added 2025/11/03 5:07 p.m.10 views

GHSA-4V8W-GG5J-PH37 MantisBT vulnerable to authentication bypass for some passwords due to PHP type juggling

Due to an incorrect use of loose == instead of strict === comparison in the authentication code1, PHP type juggling will cause interpretation of certain MD5 hashes as numbers, specifically those matching scientific notation. 1:...

9.1CVSS5.9AI score0.00322EPSS
SaveExploits0References6
Rows per page
Query Builder