MantisBT Remote Code Execution

ALTO 7.2CVE-2019-15715 · GHSA-v23g-wjvq-2fpf · Published 09/10/2019 · updated 17/06/2026

Em resumo

CVE-2019-15715 é uma vulnerabilidade ALTO (CVSS 7.2) que afeta mantisbt/mantisbt, mantisbt (mantisbt).
Chance de exploração nos próximos 30 dias (EPSS): 30.0%, maior que 98.2% das vulnerabilidades.
Correção: atualize para 2.22.1, 1.3.20 ou posterior.

Package	Affected versions	Patched versions
mantisbt/mantisbt Packagist	`≥ 2.0.0, < 2.22.1< 1.3.20`	`2.22.11.3.20`
mantisbt mantisbt	`≥ 1.0.0, < 1.3.20≥ 2.0.0, < 2.22.1`	`1.3.202.22.1`

MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

NVD description

MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 2.0.0, < 2.22.1< 1.3.20

2.22.11.3.20

≥ 1.0.0, < 1.3.20≥ 2.0.0, < 2.22.1

1.3.202.22.1

Mais vulnerabilidades de mantisbt/mantisbt

Ver tudo →