An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled.
References
| Link | Resource |
|---|---|
| http://openwall.com/lists/oss-security/2017/08/01/1 | Mailing List Third Party Advisory |
| http://openwall.com/lists/oss-security/2017/08/01/2 | Mailing List Third Party Advisory |
| http://www.securitytracker.com/id/1039030 | Third Party Advisory VDB Entry |
| https://github.com/mantisbt/mantisbt/commit/9b5b71dadbeeeec27efea59f562ac5bd6d2673b7 | Patch Third Party Advisory |
| https://mantisbt.org/bugs/view.php?id=23166 | Exploit Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-08-01 15:29
Updated : 2017-08-15 17:17
NVD link : CVE-2017-12062
Mitre link : CVE-2017-12062
CVE.ORG link : CVE-2017-12062
JSON object : View
Products Affected
mantisbt
- mantisbt
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')