Detections
Analytics

SCA: security update for mantisbt/mantisbt (GHSA-phrq-pc6r-f6gh)

critical Tenable Cloud Security Plugin ID 439129

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL
 family databases are affected by an authentication bypass vulnerability in the SOAP API, as a result of an
 improper type checking on the password parameter. Other database backends are not affected, as they do not
 perform implicit type conversion from string to integer. Using a crafted SOAP envelope, an attacker
 knowing the victim's username is able to login to the SOAP API with their account without knowledge of the
 actual password, and execute any API function they have access to. Version 2.28.1 contains a patch.
 Disabling the SOAP API significantly reduces the risk, but still allows the attacker to retrieve user
 account information including email address and real name. (CVE-2026-30849)

Solution

Update the mantisbt/mantisbt library and its related packages to version 2.28.1 or later.

See Also

https://github.com/advisories/GHSA-phrq-pc6r-f6gh

Plugin Details

Severity: Critical

ID: 439129

Version: Revision 1.9

Type: Local

Family: SCA Checks

Published: 3/24/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.95

Vendor

Vendor Severity: Critical

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-30849

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS v4

Risk Factor: Critical

Base Score: 9.3

Threat Score: 8.9

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/23/2026

Vulnerability Publication Date: 3/23/2026

Reference Information

CVE: CVE-2026-30849

cwe: CWE-305