| Package | Affected versions | Patched versions |
|---|---|---|
| mantisbt/mantisbt | ≥ 2.0.0, < 2.22.1< 1.3.20 | 2.22.11.3.20 |
| mantisbt | ≥ 1.0.0, < 1.3.20≥ 2.0.0, < 2.22.1 | 1.3.202.22.1 |
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free