Threats tagged 'ghsa-q747-c74m-69pr'

MantisBT versions prior to 2.27.2 allow users to change their email address without verifying ownership. This can lead to storing invalid email addresses or addresses belonging to others, potentially causing information disclosure through misdirected notifications. The issue is fixed in version 2.27.2.