CVE-2025-55155

MantisBT: Authentication bypass for some passwords due to PHP type juggling

State: Published
Severity: 5.4 Medium
Published: Nov 4, 2025
Updated: Nov 4, 2025
Reserved: Aug 7, 2025

Description

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing the user from receiving system notifications. Notifications sent to another person's email address could lead to information disclosure. This issue is fixed in version 2.27.2.

Scores

CVSS	Score	Vector	Source
3.1	5.4 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	GitHub_M

Weaknesses

CWE-201 Insertion of Sensitive Information Into Sent Data
CWE-354 Improper Validation of Integrity Check Value

Affected Products

Product	Versions
mantisbtmantisbt	< 2.27.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.