Man-in-the-Middle

mantisbt/mantisbt is vulnerable to Man-in-the-middle Attack. The vulnerability is due to Inadequate security checks in the password reset flow, allowing an unauthenticated attacker to manipulate the password reset link sent in the notification email to gain unauthorized access to the user’s account.