PT-2017-17980 · Mantisbt · Mantisbt

Quantumpacket · Publicado 2017-04-18 · Atualizado 2022-05-17 · CVE-2017-7897

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MantisBT versions 2.3.x through 2.3.1

Description A cross-site scripting issue exists due to the use of unsanitized $ SERVER['PHP SELF'] to generate URLs, allowing remote attackers to inject arbitrary code through crafted PATH INFO in a URL, if Content Security Policy (CSP) settings permit it. This issue affects the Timeline include page, which is used in My View and User Information pages.

Recommendations For MantisBT versions 2.3.x through 2.3.1, update to version 2.3.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the My View and User Information pages until the update is applied. Additionally, review and adjust CSP settings to minimize the risk of code injection.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-7897

GHSA-8R2M-QHFF-JM2C

Produtos afetados

Mantisbt

Referências · 8

• 🔥 https://github.com/mantisbt/mantisbt/pull/1094 · Exploit
• 🔥 http://mantisbt.org/bugs/view.php?id=22742 · Exploit
• https://github.com/mantisbt/mantisbt · Nota
• https://github.com/mantisbt/mantisbt/commit/a1c719313d61b07bbe8700005807b8195fdc32f1 · Correção
• https://osv.dev/vulnerability/CVE-2017-7897 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7897 · Nota de Segurança
• http://securitytracker.com/id/1038278 · Nota
• https://osv.dev/vulnerability/GHSA-8r2m-qhff-jm2c · Aviso do Fabricante