MantisBT: master-2.28 17072d4c

Author Committer Branch Timestamp Parent
dregad dregad master-2.28 2026-06-27 12:50 master-2.28 78c0af63
Affected Issues  0037065: CVE-2026-52882: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters
Changeset

Prevent unauthorized update of version field

Fixes 0037065, CVE-2026-52882

mod - api/soap/mc_issue_api.php Diff File
mod - bug_update.php Diff File
mod - core/commands/IssueAddCommand.php Diff File
mod - core/version_api.php Diff File