CVE-2025-55155: MantisBT: Authentication bypass for some passwords due to PHP type juggling
Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing the user from receiving system notifications. Notifications sent to another person's email address could lead to information disclosure. This issue is fixed in version 2.27.2.
Other sources
When a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user.
Impact This could result in storing an invalid email address, preventing the user from receiving system notifications.
Notifications sent to another person's email address could lead to information disclosure.
Patches Fixed in 2.27.2.
Workarounds None
Credits
Thanks to @ncrcs for discovering and reporting the issue.
— GitHub
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55155?
CVE-2025-55155 is considered a moderate severity vulnerability due to the potential for users to be unable to receive important notifications.
How do I fix CVE-2025-55155?
To fix CVE-2025-55155, update to at least version 2.27.2 of the mantisbt/mantisbt package, which includes the necessary email validation.
What is the impact of CVE-2025-55155?
The impact of CVE-2025-55155 includes users potentially being unable to receive system notifications if an invalid email address is stored.
Who is affected by CVE-2025-55155?
Users of the mantisbt/mantisbt package prior to version 2.27.2 are affected by CVE-2025-55155.
Is email validation in user profiles important regarding CVE-2025-55155?
Yes, email validation is crucial as it ensures users receive notifications and maintains the integrity of user accounts in relation to CVE-2025-55155.