{"id":"GHSA-252r-f55f-ff34","aliases":["CVE-2017-7615"],"title":"MantisBT allows arbitrary password reset","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.","severity":"high","score":8.8,"published":"2022-05-13T01:16:08.000Z","modified":"2025-04-22T18:27:09.308Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"mantisbt/mantisbt","sources":[{"name":"OSV · GHSA-252r-f55f-ff34","url":"https://osv.dev/vulnerability/GHSA-252r-f55f-ff34"}],"ranges":[{"events":[{"introduced":"1.3.0-rc.2"},{"fixed":"1.3.10"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.3.10"]},{"ecosystem":"Packagist","name":"mantisbt/mantisbt","sources":[{"name":"OSV · GHSA-252r-f55f-ff34","url":"https://osv.dev/vulnerability/GHSA-252r-f55f-ff34"}],"ranges":[{"events":[{"introduced":"2.0.0"},{"fixed":"2.2.4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.2.4"]},{"ecosystem":"Packagist","name":"mantisbt/mantisbt","sources":[{"name":"OSV · GHSA-252r-f55f-ff34","url":"https://osv.dev/vulnerability/GHSA-252r-f55f-ff34"}],"ranges":[{"events":[{"introduced":"2.3.0"},{"fixed":"2.3.1"}],"type":"ECOSYSTEM"}],"versions":["2.3.0"],"fixed":["2.3.1"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-7615","https://github.com/mantisbt/mantisbt","https://mantisbt.org/bugs/view.php?id=22690","https://www.exploit-db.com/exploits/41890","http://hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-PRE-AUTH-REMOTE-PASSWORD-RESET.txt","http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2017/04/16/2","http://www.securityfocus.com/bid/97707"],"sources":[{"name":"OSV","id":"GHSA-252r-f55f-ff34","modified":"2025-04-22T18:27:09.308236Z","url":"https://osv.dev/vulnerability/GHSA-252r-f55f-ff34"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T20:20:32.181Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[{"source":"Exploit-DB","id":"41890","url":"https://www.exploit-db.com/exploits/41890","checkedAt":"2026-10-28T07:55:38.811Z"},{"source":"Exploit-DB","id":"48818","url":"https://www.exploit-db.com/exploits/48818","checkedAt":"2026-10-28T07:55:38.811Z"}]}