[MEDIUM] MantisBT: REST API unauthorized Issue status change

PKSA-6qcn-z5zm-cd63 CVE-2026-49280 GHSA-m7ph-9558-mrx3

Affected package: mantisbt/mantisbt

Affected version: >=2.8.0,<=2.28.3

Reported by:
GitHub