MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters

Description

References

• mantisbt/mantisbt security advisory · WEB
• mantisbt/mantisbt commit 17072d4 · WEB
• mantisbt/mantisbt · PACKAGE
• mantisbt.org/bugs/view.php · WEB

Weitere Schwachstellen in mantisbt/mantisbt

• CVE-2026-47156KRITISCH 9.3MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mci_check_log…
• CVE-2026-62944HOCHMantisBT: Stored XSS in print_all_bug_page_word.php
• CVE-2026-52883MITTELMantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs
• CVE-2026-52881KRITISCHMantisBT: Reflected XSS in admin/install.php via unescaped printf
• CVE-2026-52847KRITISCHMantisBT: Reflected XSS in admin/install.php