PT-2019-13972 · Mantisbt · Mantisbt

Kamran Saifullah · Published 2019-08-21 · Updated 2022-05-24 · CVE-2019-15074

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.21.2

Description The issue concerns a stored cross-site scripting (XSS) vulnerability in the Timeline feature of the my view page.php file. This vulnerability allows for the execution of arbitrary code, provided that the Content Security Policy (CSP) settings permit it, after an attachment with a crafted filename is uploaded. The code is executed whenever the My View Page is displayed, affecting any user who has visibility to the issue.

Recommendations For versions prior to 2.21.2, update to version 2.21.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Timeline feature in my view page.php until a patch is available. Avoid uploading attachments with potentially crafted filenames to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-15074

GHSA-GG4J-279J-22PH

Affected Products

Mantisbt

References · 6

• 🔥 https://mantisbt.org/bugs/view.php?id=25995 · Exploit
• https://github.com/mantisbt/mantisbt/commit/9cee1971c498bbe0a72bca1c773fae50171d8c27 · Patch
• https://osv.dev/vulnerability/CVE-2019-15074 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gg4j-279j-22ph · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15074 · Security Note
• https://github.com/mantisbt/mantisbt · Note