PT-2019-9315
CVE-2018-16514
·
تاريخ النشر
2019-06-20
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 3.1
4.7
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MantisBT versions 2.1.0 through 2.17.0
Description
A cross-site scripting (XSS) issue exists in the View Filters page and Edit Filter page, allowing remote attackers to inject arbitrary code through a crafted PATH INFO, provided that the Content Security Policy (CSP) settings permit it.
Recommendations
For MantisBT versions 2.1.0 through 2.17.0, update to a version that includes a complete fix for the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾