MantisBT: master-2.28 63c4d4f4
| Author | Committer | Branch | Timestamp | Parent |
|---|---|---|---|---|
| dregad | dregad | master-2.28 | 2026-06-27 13:00 | master-2.28 17072d4c |
| Affected Issues | 0037200: CVE-2026-52883: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs | |||
| Changeset | Prevent special bugnotes injection via REST & SOAP Special bugnotes = TIME_TRACKING and REMINDER. Fixes 0037200, CVE-2026-52883 |
|||
| mod - api/soap/mc_issue_api.php | Diff File | |||
| mod - tests/soap/IssueUpdateTest.php | Diff File | |||
