MEDIUM
GHSA-3v2j-6fw9-f57c
MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters
Details
### Impact Users below _report_issues_for_unreleased_versions_threshold_ can assign unreleased product versions.
### Patches - https://github.com/mantisbt/mantisbt/commit/17072d4c322c85f7135ebec3417a6d90b525d12f
### Workarounds None
### Resources - https://mantisbt.org/bugs/view.php?id=37065
### Credits MantisBT thanks Vishal Shukla for discovering and responsibly reporting the issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist / mantisbt/mantisbt
Introduced in:
0 Fixed in: 2.28.4 Fix
composer require mantisbt/mantisbt:^2.28.4