PT-2010-4720 · Mantisbt · Mantisbt

Publicado

2010-10-05

·

Atualizado

2013-08-27

·

CVE-2010-3303

CVSS v2.0

3.5

Baixa

VetorAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.3
Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved through various means, including:
  • a plugin name,
  • an enumeration value or a String value of a custom field,
  • a project or
  • a category name. No information is provided about the estimated number of potentially affected devices or real-world incidents.
Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-3303

Produtos afetados

Mantisbt