CVE-2025-47776 - CVE House
Back to Database
Status published High CVE-2025-47776

MantisBT: Authentication bypass for some passwords due to PHP type juggling

Vulnerability Description

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===) comparison in the authentication code in versions 2.27.1 and below.PHP type juggling will cause certain MD5 hashes matching scientific notation to be interpreted as numbers. Instances using the MD5 login method allow an attacker who knows the victim's username and has access to an account with a password hash that evaluates to zero to log in without knowing the victim's actual password, by using any other password with a hash that also evaluates to zero This issue is fixed in version 2.27.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-47776

Credits & Attribution

No credits recorded in the NVD database.

References

More from mantisbt

View All →
CVE-2025-62520
MantisBT unauthorized disclosure of private project column configuration
Medium 5.3
CVE-2025-55155
MantisBT: Authentication bypass for some passwords due to PHP type juggling
Medium 5.4
CVE-2025-46556
MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Length
Medium 6.5
CVE-2024-45792
MantisBT vulnerable to information disclosure with user profiles
Medium 5.3
CVE-2024-34081
MantisBT Cross-site Scripting vulnerability
Medium 6.6

Affected Vendor

Affected Software

mantisbt
Vulnerable Versions:
< 2.27.2

Timeline

Official Publish: November 4th, 2025
Last Modified: November 5th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-305

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.