- MantisBT 2.25.3
Security and maintenance release
* security
- CVE-2021-43257: CSV Injection with CSV Export Feature #0029130
- CVE-2022-26144: XSS in manage_plugin_page.php and
manage_plugin_uninstall.php #0029688
- Update ADOdb to 5.20.21 #0029485
- Update guzzlehttp/psr7 to 1.8.5 #0029848
- Update moment.js to 2.29.2 #0029849
* api rest
- Slim Application Error when RestFault generated #0028927
* api soap
- SOAP call mc_project_get_id_from_name fails when there is no matching
project in PHP 7.2 #0029034
* attachments
- Adding an attachment with a long filename causes "Data too long for
column 'filename'" application error #0029144
* bugtracker
- Constant FILTER_SANITIZE_STRING is deprecated #0029845
- 'format_issue_summary' custom function not called from View Issue
Details page #0029181
- Passing null to parameter of type XXX is deprecated #0029846
* custom fields
- APPLICATION ERROR 1300 Custom field not found with case-sensitive
database #0029413
* installation
- Unable to install #0029462
* ui
- Missing closing div tag causes incorrect page footer display #0029416