PT-2014-8644
CVE-2014-8598
·
تاريخ النشر
2014-11-18
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
MantisBT versions 1.2.x
Description
The XML Import/Export plugin does not restrict access, allowing remote attackers to upload arbitrary XML files via the import page or obtain sensitive information via the export page.
Recommendations
For MantisBT versions 1.2.x, restrict access to the XML Import/Export plugin to prevent unauthorized uploads and sensitive information disclosure. As a temporary workaround, consider disabling the XML Import/Export plugin until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾