| Package | Affected versions | Patched versions |
|---|---|---|
| mantisbt/mantisbt | < 2.26.1 | 2.26.1 |
| mantisbt | < 2.26.1 | 2.26.1 |
Knowing a user's email address and username, an unauthenticated attacker can hijack the user's account by poisoning the link in the password reset notification message.
https://github.com/mantisbt/mantisbt/commit/7055731d09ff12b2781410a372f790172e279744
Define $g_path as appropriate in config_inc.php.
https://mantisbt.org/bugs/view.php?id=19381
Thanks to the following security researchers for responsibly reporting and helping resolve this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free