PT-2018-17520 · Mantisbt · Mantisbt

Shanghaikuangchuang · Published 2018-01-30 · Updated 2024-08-05 · CVE-2018-6382

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions MantisBT version 2.10.0

Description The issue allows local users to conduct SQL Injection attacks via the sql parameter in a request to the server.php endpoint, accessible from the 127.0.0.1 IP address. It is worth noting that the vendor disputes the significance of this report, stating that server.php is intended to execute arbitrary SQL statements on behalf of authenticated users from 127.0.0.1, and the issue does not have an authentication bypass.

Recommendations For MantisBT version 2.10.0, consider restricting access to the server.php endpoint to minimize the risk of exploitation, as it is intended for authenticated users from 127.0.0.1. Additionally, avoid using the sql parameter in requests to this endpoint until the issue is resolved.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-6382

Affected Products

Mantisbt

References · 5

• http://archive.is/https:/mantisbt.org/bugs/view.php?id=23908 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-6382 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6382 · Security Note
• https://mantisbt.org/bugs/view.php?id=23908 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6382 · Note