mantisbt — Vulnerabilities & Security Advisories 35

MantisBT serves as an open-source issue tracking system primarily used for bug tracking and project management in software development environments. Historically, it has been susceptible to various vulnerability classes including remote code execution, cross-site scripting (XSS), and privilege escalation, often stemming from insufficient input validation and access control flaws. While no major public security incidents have been widely documented, the 18 recorded CVEs highlight consistent security concerns, particularly in areas like authentication bypass and insecure direct object references. The application's modular architecture and extensive plugin ecosystem introduce additional potential attack surfaces, requiring regular updates and careful configuration to mitigate risks.