{"action":"Upgrade mantisbt/mantisbt to 2.25.3 or later.","affected":[{"fixed":"2.25.3","introduced":"0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2021-43257"],"ecosystem":"Packagist","epss":0.00979,"exploited":false,"fixed_versions":["2.25.3"],"ghsa_id":"GHSA-rg8f-5p7x-m6wv","id":"tcs_01M5KF882G8DRXHJEZAXPC14VD","modified_at":"2025-05-30T14:29:37.617016Z","published_at":"2022-04-15T00:00:38Z","references":["https://osv.dev/vulnerability/GHSA-rg8f-5p7x-m6wv","https://nvd.nist.gov/vuln/detail/CVE-2021-43257","https://github.com/mantisbt/mantisbt/commit/7f4534c723e3162b8784aebda4836324041dbc3e","https://github.com/mantisbt/mantisbt/commit/99eb8d41cbacc703f88807898dcc9ac55eec0f15","https://github.com/mantisbt/mantisbt","https://www.mantisbt.org/bugs/view.php?id=29130"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-rg8f-5p7x-m6wv","url":"https://osv.dev/vulnerability/GHSA-rg8f-5p7x-m6wv"}],"summary":"MantisBT CSV Injection unprivileged user access in csv_export.php"}