PT-2015-4173 · Mantisbt · Mantisbt

Mathias Karlsson · Published 2015-01-06 · Updated 2021-01-12 · CVE-2014-9272

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.0a1 through 1.2.x before 1.2.18

Description The issue concerns a function that does not properly validate the URL protocol, allowing remote attackers to conduct cross-site scripting (XSS) attacks via the javascript:// protocol. This could potentially lead to malicious scripts being executed on user systems.

Recommendations For MantisBT versions 1.2.0a1 through 1.2.x before 1.2.18, update to version 1.2.18 or later to resolve the issue. As a temporary workaround, consider restricting the use of the string insert href function until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-9272

DSA-3120-1

Affected Products

Mantisbt

References · 43

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mantisbt_php_exec.rb · Exploit
• https://security-tracker.debian.org/tracker/source-package/mantis · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6387 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9270 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1934 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1811 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8554 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8598 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9117 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6316 · Security Note
• https://osv.dev/vulnerability/DSA-3120-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9271 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8988 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-9272 · Security Note