CVE-2017-7615
High · 8.8CVSS
8.8
EPSS
91.2%
Published
Apr 16, 2017
CISA due date
—
The record
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | mantisbt/mantisbt | 1.3.0-rc.2 | 1.3.10 |
| Packagist | mantisbt/mantisbt | 2.0.0 | 2.2.4 |
| Packagist | mantisbt/mantisbt | 2.3.0 | 2.3.1 |
| packagist | mantisbt/mantisbt | 1.3.0-rc.2 | 1.3.10 |
| packagist | mantisbt/mantisbt | 2.0.0 | 2.2.4 |
| packagist | mantisbt/mantisbt | 2.3.0 | 2.3.1 |
Related vulnerabilities
- CVE-2025-62520 MantisBT unauthorized disclosure of private project column configuration Also affects mantisbt/mantisbt
- CVE-2025-55155 MantisBT: Authentication bypass for some passwords due to PHP type juggling Also affects mantisbt/mantisbt
- CVE-2025-47776 MantisBT: Authentication bypass for some passwords due to PHP type juggling Also affects mantisbt/mantisbt
- CVE-2025-46556 MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Length Also affects mantisbt/mantisbt
- GHSA-g582-8vwr-68h2 MantisBT unauthorized disclosure of private project column configuration Also affects mantisbt/mantisbt
- GHSA-q747-c74m-69pr MantisBT lacks verification when changing a user's email address Also affects mantisbt/mantisbt
- GHSA-r3jf-hm7q-qfw5 MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length Also affects mantisbt/mantisbt
- GHSA-4v8w-gg5j-ph37 MantisBT vulnerable to authentication bypass for some passwords due to PHP type juggling Also affects mantisbt/mantisbt