View Issue Details

IDProjectCategoryView StatusLast Update
0037118mantisbtsignuppublic2026-05-13 00:57
ReporterImmortal_0508 Assigned To 
PriorityhighSeveritytextReproducibilityN/A
Status feedbackResolutionopen 
Summary0037118: The login page allows users to enter only blank spaces in the username field and proceeds instead of validating the input.
Description

When a user enters only blank spaces in the username field and tries to log in with any password, the system does not display any validation error and processes the request. This may lead to unexpected behavior and reduces the overall security and input validation of the application.

Steps To Reproduce

Open the MantisBT website.
Navigate to the Login page.
Enter blank spaces in the Username field.
Enter any password.
Click on the Login button.
Observe the system behavior.

TagsNo tags attached.
Attached Files
img2.png (176,679 bytes)   
img2.png (176,679 bytes)   

Activities

atrol

atrol

2026-05-13 00:57

developer   ~0071095

@Immortal_0508 the screenshot does not show an original MantisBT login screen.
Are you running a tweaked version of MantisBT or did you install a plugin?