{"id":518,"date":"2017-04-17T03:33:45","date_gmt":"2017-04-17T03:33:45","guid":{"rendered":"http:\/\/www.mantisbt.org\/blog\/?p=518"},"modified":"2017-04-17T03:33:45","modified_gmt":"2017-04-17T03:33:45","slug":"critical-security-fix-releases-2-3-1-2-2-4-and-1-3-10","status":"publish","type":"post","link":"https:\/\/mantisbt.org\/blog\/archives\/mantisbt\/518","title":{"rendered":"Critical Security Fix Releases: 2.3.1, 2.2.4, and 1.3.10"},"content":{"rendered":"<p>This is the release announcement for releases including the fixes for a\u00a0critical security issue (<a href=\"https:\/\/mantisbt.org\/bugs\/view.php?id=22690\">#22690<\/a> for CVE-2017-7615), allowing a remote attacker to reset any user&#8217;s password, on all MantisBT instances where\u00a0user signup or password reset are enabled, via a vulnerability in the Account verification page (verify.php).<\/p>\n<p>MantisBT since 1.3.0-rc.2 (included) is affected, as well as all 2.x releases. The issue will be fixed in versions 1.3.10, 2.2.4, and 2.3.1, to be released soon.<\/p>\n<p>This issue has been fixed in release 1.3.10, 2.2.4, and 2.3.1 that we just <a href=\"https:\/\/www.mantisbt.org\/download.php\">published<\/a>.<\/p>\n<p>Due to the nature and criticality of the bug, we sent last night an advance notification to users that are registered on our bug tracker, providing the following patch that can mitigate the issue. \u00a0If for any reason you can&#8217;t upgrade, go ahead and use the one line change below to patch your MantisBT instance.<\/p>\n<p>Locate the if statement (at line 72 in 2.0.0-beta.3 and later, line 66 in older versions):<\/p>\n<p><code>if( $f_confirm_hash != $t_token_confirm_hash ) {<\/code><\/p>\n<p>change it to<\/p>\n<p><code>if( $t_token_confirm_hash == null || $f_confirm_hash !== $t_token_confirm_hash ) {<\/code><\/p>\n<p><em><strong>You are strongly advised to patch your systems immediately.<\/strong><\/em><\/p>\n<p>We would like to take this opportunity to thank John Page aka hyp3rlinx from ApparitionSec (http:\/\/hyp3rlinx.altervista.org) for discovering, responsibly reporting and working with us towards resolution of this vulnerability.<\/p>\n<p>Thanks,<br \/>\n-MantisBT Team<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is the release announcement for releases including the fixes for a\u00a0critical security issue (#22690 for CVE-2017-7615), allowing a remote attacker to reset any user&#8217;s password, on all MantisBT instances where\u00a0user signup or password reset are enabled, via a vulnerability in the Account verification page (verify.php). MantisBT since 1.3.0-rc.2 (included) is affected, as well as &hellip; <a href=\"https:\/\/mantisbt.org\/blog\/archives\/mantisbt\/518\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Critical Security Fix Releases: 2.3.1, 2.2.4, and 1.3.10&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6],"class_list":["post-518","post","type-post","status-publish","format-standard","hentry","category-mantisbt","tag-release"],"_links":{"self":[{"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/posts\/518","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/comments?post=518"}],"version-history":[{"count":1,"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/posts\/518\/revisions"}],"predecessor-version":[{"id":519,"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/posts\/518\/revisions\/519"}],"wp:attachment":[{"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/media?parent=518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/categories?post=518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mantisbt.org\/blog\/wp-json\/wp\/v2\/tags?post=518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}