MantisBT lacks verification when changing a user's email address

中 5.4CVE-2025-55155 · GHSA-q747-c74m-69pr · 04/11/2025 公開 · 19/10/2026 更新

要点

CVE-2025-55155 は mantisbt/mantisbt, mantisbt (mantisbt) に影響する深刻度「中」 (CVSS 5.4) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.16%（全脆弱性の 5.5% より高い）。
対処：2.27.2 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
mantisbt/mantisbt Packagist	`< 2.27.2`	`2.27.2`
mantisbt mantisbt	`< 2.27.2`	`2.27.2`

概要

When a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user.

Impact

This could result in storing an invalid email address, preventing the user from receiving system notifications.

Notifications sent to another person's email address could lead to information disclosure.

Patches

Fixed in 2.27.2.

Workarounds

None

Credits

Thanks to @ncrcs for discovering and reporting the issue.

NVD の説明

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing the user from receiving system notifications. Notifications sent to another person's email address could lead to information disclosure. This issue is fixed in version 2.27.2.