CVE-2025-55155

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing the user from receiving system notifications. Notifications sent to another person's email address could lead to information disclosure. This issue is fixed in version 2.27.2.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/mantisbt/mantisbt/commit/21e9fbedde8553c29c0d3156e84f78157fc4f22e	Patch
https://github.com/mantisbt/mantisbt/security/advisories/GHSA-q747-c74m-69pr	Issue Tracking Vendor Advisory
https://mantisbt.org/bugs/view.php?id=36005	Exploit Issue Tracking Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*

History

19 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Mantis Bug Tracker (MantisBT) es un rastreador de problemas de código abierto. En las versiones 2.27.1 e inferiores, cuando un usuario edita su perfil para cambiar su dirección de correo electrónico, el sistema la guarda sin validar que realmente le pertenezca al usuario. Esto podría resultar en el almacenamiento de una dirección de correo electrónico no válida, impidiendo que el usuario reciba notificaciones del sistema. Las notificaciones enviadas a la dirección de correo electrónico de otra persona podrían conducir a la revelación de información. Este problema se solucionó en la versión 2.27.2.

Information

Published : 2025-11-04 21:15

Updated : 2026-10-19 13:10

NVD link : CVE-2025-55155

Mitre link : CVE-2025-55155

CVE.ORG link : CVE-2025-55155

JSON object : View

Products Affected

mantisbt

mantisbt

CWE

CWE-201

Insertion of Sensitive Information Into Sent Data

CWE-354

Improper Validation of Integrity Check Value

{"id": "CVE-2025-55155", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-55155", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-04T21:03:02.558301Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "mantisbt", "product": "mantisbt", "versions": [{"status": "affected", "version": "< 2.27.2"}]}]}], "published": "2025-11-04T21:15:39.280", "references": [{"url": "https://github.com/mantisbt/mantisbt/commit/21e9fbedde8553c29c0d3156e84f78157fc4f22e", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/mantisbt/mantisbt/security/advisories/GHSA-q747-c74m-69pr", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://mantisbt.org/bugs/view.php?id=36005", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-201"}, {"lang": "en", "value": "CWE-354"}]}], "descriptions": [{"lang": "en", "value": "Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing the user from receiving system notifications. Notifications sent to another person's email address could lead to information disclosure. This issue is fixed in version 2.27.2."}, {"lang": "es", "value": "Mantis Bug Tracker (MantisBT) es un rastreador de problemas de c\u00f3digo abierto. En las versiones 2.27.1 e inferiores, cuando un usuario edita su perfil para cambiar su direcci\u00f3n de correo electr\u00f3nico, el sistema la guarda sin validar que realmente le pertenezca al usuario. Esto podr\u00eda resultar en el almacenamiento de una direcci\u00f3n de correo electr\u00f3nico no v\u00e1lida, impidiendo que el usuario reciba notificaciones del sistema. Las notificaciones enviadas a la direcci\u00f3n de correo electr\u00f3nico de otra persona podr\u00edan conducir a la revelaci\u00f3n de informaci\u00f3n. Este problema se solucion\u00f3 en la versi\u00f3n 2.27.2."}], "lastModified": "2026-10-19T13:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B49EF21D-F412-4C89-BFA8-9606F204E310", "versionEndExcluding": "2.27.2"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}