Packagist/mantisbt/mantisbt CVE-2009-20001: high 8.1, EPSS 0.87%
MantisBT Insufficient Session Expiration cookie string not reset after logout
Action: Upgrade mantisbt/mantisbt to 2.24.5 or later.
composer require mantisbt/mantisbt:2.24.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.24.5 | - |
Fixed versions
| 2.24.5 |
Sources
- osv: GHSA-jm72-67rm-763j
- https://nvd.nist.gov/vuln/detail/CVE-2009-20001
- https://github.com/mantisbt/mantisbt/commit/79a78c09d5ef5ce098adc73f6f1416f00fc238a5
- https://github.com/mantisbt/mantisbt
- https://mantisbt.org/bugs/view.php?id=11296
- https://mantisbt.org/bugs/view.php?id=27976
CVE-2009-20001 · published · modified · JSON