CVE-2017-7615

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.

Date published : 2017-04-16

http://www.securityfocus.com/bid/97707

https://mantisbt.org/bugs/view.php?id=22690