Approved changes feed: RSS · Atom

cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMantisbt (9be8c23a-b549-5ad5-a5b6-9beba90daced)
ProductMantisbt (9ac8dfd9-fe15-55d7-90e0-68973c4eb995)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mantisbt/mantisbt purl2cpe 2026-06-01 10:12:58.605280
pkg:rpm/opensuse/mantisbt purl2cpe 2026-06-01 10:12:58.605281

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44657 vulnerable 2026-06-08 08:05:11.241213 MantisBT: Stored XSS in File Download
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, using show_inline=1 parameter and a valid file_show_inline_token CSRF token on file_download.php, an attacker can execute code by uploading a crafted XHTML attachment referencing a JavaScript attachment. This vulnerability is fixed in 2.28.2.
Published: 2026-05-28T20:25:26.816Z
Updated: 2026-05-29T14:50:03.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44655 vulnerable 2026-06-08 08:05:11.239589 MantisBT: Stored XSS on Move Attachments Admin Page
Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.3.0 to 2.28.1, unescaped Project Name allows an attacker that can set it (which typically requires manager or administrator access level) to inject HTML in Move Attachments admin page. This vulnerability is fixed in 2.28.2.
Published: 2026-05-28T20:27:02.724Z
Updated: 2026-05-29T19:12:11.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42071 vulnerable 2026-06-08 08:03:15.899313 MantisBT: Private Bugnote Attachment Content Leak via REST API
Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 2.23.0 to 2.28.1, a missing authorization check in MantisBT's file visibility function allows any authenticated user (REPORTER+) to download attachments on private bugnotes they should not be able to access, via the REST API endpoint GET /api/rest/issues/{id}/files and SOAP API mc_issue_attachment_get endpoint. This vulnerability is fixed in 2.28.2.
Published: 2026-05-28T20:29:20.361Z
Updated: 2026-05-29T13:56:52.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42070 vulnerable 2026-06-08 08:03:15.899039 MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, the mc_issue_update() function in MantisBT allows users having update_bug_threshold access (UPDATER, with default settings) to edit, change view state, and modify time tracking on bugnotes belonging to other users — bypassing the default DEVELOPER (level 55) threshold required by the dedicated mc_issue_note_update() function. This vulnerability is fixed in 2.28.2.
Published: 2026-05-28T20:28:20.369Z
Updated: 2026-06-02T13:50:27.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41897 vulnerable 2026-06-08 08:03:15.741279 MantisBT: Reflected XSS in Rendering Dynamic Custom Textarea Field
Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.0.0 to 2.28.1, lack of validation of filter_target parameter on return_dynamic_filters.php (normally used as an AJAX in View Issues Page) allows an attacker to inject arbitrary HTML if the target is a TEXTAREA custom field. This vulnerability is fixed in 2.28.2.
Published: 2026-05-28T20:26:24.192Z
Updated: 2026-05-30T02:15:20.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40607 vulnerable 2026-06-08 08:01:20.871559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40598 vulnerable 2026-06-08 08:01:20.863839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40597 vulnerable 2026-06-08 08:01:20.863613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40596 vulnerable 2026-06-08 08:01:20.863361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39960 vulnerable 2026-06-08 08:01:17.238823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34970 vulnerable 2026-06-08 07:59:13.378100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34754 vulnerable 2026-06-08 07:59:13.074421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34744 vulnerable 2026-06-08 07:59:13.061283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34579 vulnerable 2026-06-08 07:59:12.713942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34463 vulnerable 2026-06-08 07:59:12.534613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34390 vulnerable 2026-06-08 07:59:12.467511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33548 vulnerable 2026-06-08 07:59:10.362890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33517 vulnerable 2026-06-08 07:59:10.241593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33052 vulnerable 2026-06-08 07:57:18.516356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-30849 vulnerable 2026-06-08 07:57:14.370344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62520 vulnerable 2026-06-08 07:37:29.886041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55155 vulnerable 2026-06-08 07:33:14.199659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47776 vulnerable 2026-06-08 07:27:14.812184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46556 vulnerable 2026-06-08 07:27:08.429782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45792 vulnerable 2026-06-08 06:48:09.044446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34081 vulnerable 2026-06-08 06:37:32.629883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34080 vulnerable 2026-06-08 06:37:32.627691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34077 vulnerable 2026-06-08 06:37:32.625025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23830 vulnerable 2026-06-08 06:29:40.733941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44394 vulnerable 2026-06-08 06:12:40.907084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22476 vulnerable 2026-06-08 05:54:26.398852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33910 vulnerable 2026-06-08 05:44:51.690666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28508 vulnerable 2026-06-08 05:42:44.569798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26144 vulnerable 2026-06-08 05:41:50.688312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43257 vulnerable 2026-06-08 05:36:43.021362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33557 vulnerable 2026-06-08 05:32:11.795164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35849 vulnerable 2026-06-08 05:25:02.240365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35571 vulnerable 2026-06-08 05:25:01.341080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29605 vulnerable 2026-06-08 05:24:58.563637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29604 vulnerable 2026-06-08 05:24:58.563265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29603 vulnerable 2026-06-08 05:24:58.562612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25830 vulnerable 2026-06-08 05:23:49.508447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25781 vulnerable 2026-06-08 05:23:49.419956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25288 vulnerable 2026-06-08 05:22:36.685848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16266 vulnerable 2026-06-08 05:19:27.864399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15715 vulnerable 2026-06-08 05:12:57.872878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15539 vulnerable 2026-06-08 05:12:57.558432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15074 vulnerable 2026-06-08 05:12:56.623004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9839 vulnerable 2026-06-08 05:12:08.314561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6526 vulnerable 2026-06-08 05:11:53.918696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17783 vulnerable 2026-06-08 05:11:06.711441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17782 vulnerable 2026-06-08 05:11:06.711018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16514 vulnerable 2026-06-08 05:11:04.972715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14504 vulnerable 2026-06-08 05:10:53.002130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13055 vulnerable 2026-06-08 05:10:50.852367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7620 vulnerable 2026-06-08 05:09:56.664572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7615 vulnerable 2026-06-08 05:09:56.623710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7222 vulnerable 2026-06-08 05:09:55.483604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6799 vulnerable 2026-06-08 05:09:54.983408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6797 vulnerable 2026-06-08 05:09:54.981257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12061 vulnerable 2026-06-08 05:08:38.673794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7111 vulnerable 2026-06-08 05:08:11.834858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6837 vulnerable 2026-06-08 05:08:11.176526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5364 vulnerable 2026-06-08 05:07:56.874495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5059 vulnerable 2026-06-08 05:06:48.710614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9701 vulnerable 2026-06-08 05:06:12.540287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9624 vulnerable 2026-06-08 05:06:12.236289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9573 vulnerable 2026-06-08 05:06:12.160076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9572 vulnerable 2026-06-08 05:06:12.159537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9571 vulnerable 2026-06-08 05:06:12.158039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9506 vulnerable 2026-06-08 05:06:11.996867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9388 vulnerable 2026-06-08 05:06:11.577590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9281 vulnerable 2026-06-08 05:06:11.313518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9280 vulnerable 2026-06-08 05:06:11.313120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9117 vulnerable 2026-06-08 05:06:10.914712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9089 vulnerable 2026-06-08 05:06:10.852095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8598 vulnerable 2026-06-08 05:06:09.688716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8554 vulnerable 2026-06-08 05:06:09.276883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8553 vulnerable 2026-06-08 05:06:09.276027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6387 vulnerable 2026-06-08 05:05:57.597493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6316 vulnerable 2026-06-08 05:05:57.417221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1609 vulnerable 2026-06-08 05:05:25.696562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1608 vulnerable 2026-06-08 05:05:25.684983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1934 vulnerable 2026-06-08 05:03:57.345396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1932 vulnerable 2026-06-08 05:03:57.342957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1931 vulnerable 2026-06-08 05:03:57.342586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1930 vulnerable 2026-06-08 05:03:57.342180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1811 vulnerable 2026-06-08 05:03:56.509743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5523 vulnerable 2026-06-08 05:02:57.033284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5522 vulnerable 2026-06-08 05:02:57.000379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2692 vulnerable 2026-06-08 05:02:05.552447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2691 vulnerable 2026-06-08 05:02:05.521159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1123 vulnerable 2026-06-08 05:00:47.590601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1122 vulnerable 2026-06-08 05:00:47.589139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1121 vulnerable 2026-06-08 05:00:47.587613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1120 vulnerable 2026-06-08 05:00:47.585941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1119 vulnerable 2026-06-08 05:00:47.569071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1118 vulnerable 2026-06-08 05:00:47.540915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3578 vulnerable 2026-06-08 04:59:26.419971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3358 vulnerable 2026-06-08 04:59:24.859984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3357 vulnerable 2026-06-08 04:59:24.858763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3356 vulnerable 2026-06-08 04:59:24.840131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2938 vulnerable 2026-06-08 04:58:09.704064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4350 vulnerable 2026-06-08 04:56:27.284037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4349 vulnerable 2026-06-08 04:56:27.281959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4348 vulnerable 2026-06-08 04:56:27.253234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3763 vulnerable 2026-06-08 04:55:16.684898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3303 vulnerable 2026-06-08 04:55:14.070499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2802 vulnerable 2026-06-08 04:55:10.769496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2802 vulnerable 2026-06-08 04:51:30.453544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-20001 vulnerable 2026-06-08 04:51:26.049657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.