CVE-2025-55155 - CVE House

Back to Database

Status published Medium CVE-2025-55155

MantisBT: Authentication bypass for some passwords due to PHP type juggling

5.4 CVSS

Vulnerability Description

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing the user from receiving system notifications. Notifications sent to another person's email address could lead to information disclosure. This issue is fixed in version 2.27.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-55155

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from mantisbt

View All →

MantisBT unauthorized disclosure of private project column configuration

MantisBT: Authentication bypass for some passwords due to PHP type juggling

MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Length

MantisBT vulnerable to information disclosure with user profiles

MantisBT Cross-site Scripting vulnerability

Affected Vendor

mantisbt

View all reports →

Affected Software

mantisbt

Vulnerable Versions:

< 2.27.2

Timeline

Official Publish: November 4th, 2025

Last Modified: November 4th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-201 CWE-354

MITRE ATT&CK TTPs

T1041 Exfiltration Over C2 Channel

T1040 Network Sniffing

Credential Access

T1557 Adversary-in-the-Middle

T1552 Unsecured Credentials

Credential Access

T1078 Valid Accounts