CVE-2025-55155CWE-201CWE-354

CVE-2025-55155

Medium · published November 5, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing the user from receiving system notifications. Notifications sent to another person's email address could lead to information disclosure. This issue is fixed in version 2.27.2.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Weaknesses
CWE-201 · Insertion of Sensitive Information Into Sent Data; CWE-354 · Improper Validation of Integrity Check Value
Published
2025-11-05T02:15Z
Affected products (1)
ProductVersionsFixed in
mantisbt/mantisbt< 2.27.22.27.2
References (3)
https://github.com/mantisbt/mantisbt/commit/21e9fbedde8553c29c0d3156e84f78157fc4f22e · [email protected]https://github.com/mantisbt/mantisbt/security/advisories/GHSA-q747-c74m-69pr · [email protected]https://mantisbt.org/bugs/view.php?id=36005 · [email protected]
EPSS history
Timeline
  • 04 NOV 20:48Z
    MantisBT: Authentication bypass for some passwords due to PHP type juggling
    cvelistv5