PT-2018-17520 · Mantisbt · Mantisbt

Shanghaikuangchuang · Publicado 2018-01-30 · Atualizado 2024-08-05 · CVE-2018-6382

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions MantisBT version 2.10.0

Description The issue allows local users to conduct SQL Injection attacks via the sql parameter in a request to the server.php endpoint, accessible from the 127.0.0.1 IP address. It is worth noting that the vendor disputes the significance of this report, stating that server.php is intended to execute arbitrary SQL statements on behalf of authenticated users from 127.0.0.1, and the issue does not have an authentication bypass.

Recommendations For MantisBT version 2.10.0, consider restricting access to the server.php endpoint to minimize the risk of exploitation, as it is intended for authenticated users from 127.0.0.1. Additionally, avoid using the sql parameter in requests to this endpoint until the issue is resolved.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-6382

Produtos afetados

Mantisbt

Referências · 5

• http://archive.is/https:/mantisbt.org/bugs/view.php?id=23908 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6382 · Nota
• https://osv.dev/vulnerability/CVE-2018-6382 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6382 · Nota de Segurança
• https://mantisbt.org/bugs/view.php?id=23908 · Aviso do Fabricante