PT-2017-17980 · Mantisbt · Mantisbt

Quantumpacket · Published 2017-04-18 · Updated 2022-05-17 · CVE-2017-7897

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MantisBT versions 2.3.x through 2.3.1

Description A cross-site scripting issue exists due to the use of unsanitized $ SERVER['PHP SELF'] to generate URLs, allowing remote attackers to inject arbitrary code through crafted PATH INFO in a URL, if Content Security Policy (CSP) settings permit it. This issue affects the Timeline include page, which is used in My View and User Information pages.

Recommendations For MantisBT versions 2.3.x through 2.3.1, update to version 2.3.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the My View and User Information pages until the update is applied. Additionally, review and adjust CSP settings to minimize the risk of code injection.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-7897

GHSA-8R2M-QHFF-JM2C

Affected Products

Mantisbt

References · 8

• 🔥 https://github.com/mantisbt/mantisbt/pull/1094 · Exploit
• 🔥 http://mantisbt.org/bugs/view.php?id=22742 · Exploit
• https://github.com/mantisbt/mantisbt/commit/a1c719313d61b07bbe8700005807b8195fdc32f1 · Patch
• https://osv.dev/vulnerability/CVE-2017-7897 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7897 · Security Note
• https://osv.dev/vulnerability/GHSA-8r2m-qhff-jm2c · Vendor Advisory
• https://github.com/mantisbt/mantisbt · Note
• http://securitytracker.com/id/1038278 · Note