PT-2022-17692 · Mantisbt · Mantisbt

Dregad · Published 2022-04-13 · Updated 2022-04-20 · CVE-2022-26144

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.25.3

Description An issue was discovered in MantisBT, where improper escaping of a Plugin name allows execution of arbitrary code in manage plugin page.php and manage plugin uninstall.php when a crafted plugin is installed, provided that the Content Security Policy (CSP) allows it.

Recommendations For versions prior to 2.25.3, update to version 2.25.3 or later to resolve the issue. As a temporary workaround, consider restricting the installation of plugins to trusted sources until a patch is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-26144

GHSA-RQGJ-RQFR-5J6F

Affected Products

Mantisbt

References · 9

• https://mantisbt.org/bugs/view.php?id=29688 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26144 · Security Note
• https://osv.dev/vulnerability/GHSA-rqgj-rqfr-5j6f · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-26144 · Vendor Advisory
• https://github.com/mantisbt/mantisbt · Note
• https://github.com/mantisbt/mantisbt/commit/a7751c3e318011ca1314bc1cfea200d53e0dfff6 · Note
• https://t.me/cvenotify/28840 · Telegram Post
• https://t.me/cibsecurity/40725 · Telegram Post
• https://t.me/cvenotify/29224 · Telegram Post