{"action":"Upgrade mantisbt/mantisbt to 2.24.5 or later.","affected":[{"fixed":"2.24.5","introduced":"0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2009-20001"],"ecosystem":"Packagist","epss":0.00871,"exploited":false,"fixed_versions":["2.24.5"],"ghsa_id":"GHSA-jm72-67rm-763j","id":"tcs_01M5KF4PY5HAB4Q3MJAF9WQJXC","modified_at":"2025-06-09T18:16:13.571372Z","published_at":"2022-04-21T01:54:03Z","references":["https://osv.dev/vulnerability/GHSA-jm72-67rm-763j","https://nvd.nist.gov/vuln/detail/CVE-2009-20001","https://github.com/mantisbt/mantisbt/commit/79a78c09d5ef5ce098adc73f6f1416f00fc238a5","https://github.com/mantisbt/mantisbt","https://mantisbt.org/bugs/view.php?id=11296","https://mantisbt.org/bugs/view.php?id=27976"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-jm72-67rm-763j","url":"https://osv.dev/vulnerability/GHSA-jm72-67rm-763j"}],"summary":"MantisBT Insufficient Session Expiration cookie string not reset after logout"}