github.com
https://github.com/mantisbt/mantisbt CVE-2026-52882
MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters
Description
### Impact Users below _report_issues_for_unreleased_versions_threshold_ can assign unreleased product versions. ### Patches - https://github.com/mantisbt/mantisbt/commit/17072d4c322c85f7135ebec3417a6d90b525d12f ### Workarounds None ### Resources - https://mantisbt.org/bugs/view.php?id=37065 ### Credits MantisBT thanks Vishal Shukla for discovering and responsibly reporting the issue.
Description source: GitHub Advisory
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
mantisbt/mantisbtBrowse Packagist / mantisbt/mantisbt | GitHub Advisory | Before 2.28.4 · Fixed in 2.28.4 | affected |
References
4github.com
https://github.com/mantisbt/mantisbt/commit/17072d4c322c85f7135ebec3417a6d90b525d12f github.com
https://github.com/mantisbt/mantisbt/security/advisories/GHSA-3v2j-6fw9-f57c mantisbt.org
https://mantisbt.org/bugs/view.php?id=37065