PT-2019-13972 · Mantisbt · Mantisbt

Kamran Saifullah · Publicado 2019-08-21 · Atualizado 2022-05-24 · CVE-2019-15074

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.21.2

Description The issue concerns a stored cross-site scripting (XSS) vulnerability in the Timeline feature of the my view page.php file. This vulnerability allows for the execution of arbitrary code, provided that the Content Security Policy (CSP) settings permit it, after an attachment with a crafted filename is uploaded. The code is executed whenever the My View Page is displayed, affecting any user who has visibility to the issue.

Recommendations For versions prior to 2.21.2, update to version 2.21.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Timeline feature in my view page.php until a patch is available. Avoid uploading attachments with potentially crafted filenames to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-15074

GHSA-GG4J-279J-22PH

Produtos afetados

Mantisbt

Referências · 6

• 🔥 https://mantisbt.org/bugs/view.php?id=25995 · Exploit
• https://github.com/mantisbt/mantisbt · Nota
• https://github.com/mantisbt/mantisbt/commit/9cee1971c498bbe0a72bca1c773fae50171d8c27 · Correção
• https://osv.dev/vulnerability/CVE-2019-15074 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-gg4j-279j-22ph · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15074 · Nota de Segurança