← Vulnerability feed

Vulnerability record · CVE-2011-3357 · published 21 September 2011

CVE-2011-3357: Mantisbt path traversal vulnerability

Mantisbt · Mantisbt

Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter, related to bug_actiongroup_page.php.

6.8 CVSS 2.0 Medium EPSS 9.3% · top 4.8% CWE-22 · Path traversal
6.8CVSS 2.0 base score
9.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
38References, 16 tagged exploit
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter, related to bug_actiongroup_page.php.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640297 ExploitPatch
http://lists.debian.org/debian-security-tracker/2011/09/msg00012.html Exploit
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066061.html Exploit
http://secunia.com/advisories/45961 Vendor Advisory
http://secunia.com/advisories/51199
http://security.gentoo.org/glsa/glsa-201211-01.xml
http://securityreason.com/securityalert/8392
http://www.debian.org/security/2011/dsa-2308
http://www.mantisbt.org/bugs/view.php?id=13281 Exploit
http://www.openwall.com/lists/oss-security/2011/09/04/1 Exploit
http://www.openwall.com/lists/oss-security/2011/09/04/2
http://www.openwall.com/lists/oss-security/2011/09/09/9 Exploit
http://www.securityfocus.com/archive/1/519547/100/0/threaded
http://www.securityfocus.com/bid/49448
https://bugzilla.redhat.com/show_bug.cgi?id=735514 ExploitPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/69588
https://github.com/mantisbt/mantisbt/commit/5b93161f3ece2f73410c296fed8522f6475d273d Patch
https://github.com/mantisbt/mantisbt/commit/6ede60d3db9e202044f135001589cce941ff6f0f Patch
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_mantisbt.html Exploit
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640297 ExploitPatch
http://lists.debian.org/debian-security-tracker/2011/09/msg00012.html Exploit
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066061.html Exploit
http://secunia.com/advisories/45961 Vendor Advisory
http://secunia.com/advisories/51199
http://security.gentoo.org/glsa/glsa-201211-01.xml
http://securityreason.com/securityalert/8392
http://www.debian.org/security/2011/dsa-2308
http://www.mantisbt.org/bugs/view.php?id=13281 Exploit
http://www.openwall.com/lists/oss-security/2011/09/04/1 Exploit
http://www.openwall.com/lists/oss-security/2011/09/04/2
http://www.openwall.com/lists/oss-security/2011/09/09/9 Exploit
http://www.securityfocus.com/archive/1/519547/100/0/threaded
http://www.securityfocus.com/bid/49448
https://bugzilla.redhat.com/show_bug.cgi?id=735514 ExploitPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/69588
https://github.com/mantisbt/mantisbt/commit/5b93161f3ece2f73410c296fed8522f6475d273d Patch
https://github.com/mantisbt/mantisbt/commit/6ede60d3db9e202044f135001589cce941ff6f0f Patch
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_mantisbt.html Exploit

Track CVE-2011-3357 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.6CVE-2019-15074Mantisbt cross-site scripting vulnerabilityThe Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbi…EPSS 2.1%9.3CVE-2026-30849Mantisbt vulnerabilityMantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family databases are affected by an authenti…EPSS 2.4%8.8CVE-2025-47776Mantisbt vulnerabilityMantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===) comparison in the authentic…EPSS 0.32%8.8CVE-2017-7615MantisBT weak password reset allows unauthenticated admin accessMantisBT through 2.3.0 mishandles password reset confirmation, allowing an attacker to supply an empty confirm_hash value to verify.php. This permits…EPSS 91%analysed8.6CVE-2026-33517Mantisbt cross-site scripting vulnerabilityMantis Bug Tracker (MantisBT) is an open source issue tracker. In version 2.28.0, when deleting a Tag (tag_delete.php), improper escaping of its name…EPSS 0.35%8.6CVE-2026-33548Mantisbt cross-site scripting vulnerabilityMantis Bug Tracker (MantisBT) is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline (…EPSS 0.29%8.3CVE-2024-23830Mantisbt injection vulnerabilityMantisBT is an open source issue tracker. Prior to version 2.26.1, an unauthenticated attacker who knows a user's email address and username can hija…EPSS 0.96%8.1CVE-2009-20001Mantisbt insufficient session expiration vulnerabilityAn issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is not reset upon logout (i.e., t…EPSS 0.87%

Source: NIST National Vulnerability Database (record CVE-2011-3357), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.