PT-2024-25692 · Mantisbt · Mantisbt

Unboundeduniverse · Published 2024-05-13 · Updated 2025-01-16 · CVE-2024-34081

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.26.2

Description The issue is related to improper escaping of a custom field's name, allowing an attacker to inject HTML and potentially execute arbitrary JavaScript when certain conditions are met, such as resolving or closing issues, viewing issues when the custom field is displayed as a column, or printing issues when the custom field is displayed as a column. This can occur in specific pages like bug change status page.php, view all bug page.php, and print all bug page.php. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For versions prior to 2.26.2, update to version 2.26.2 or later to resolve the issue. As a temporary workaround, ensure Custom Field Names do not contain HTML tags.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-34081

GHSA-WGX7-JP56-65MQ

Affected Products

Mantisbt

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34081.json · Exploit
• https://github.com/mantisbt/mantisbt/commit/447a521aae0f82f791b8116a14a20e276df739be · Patch
• https://github.com/mantisbt/mantisbt/security/advisories/GHSA-wgx7-jp56-65mq · Vendor Advisory
• https://mantisbt.org/bugs/view.php?id=34432 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-34081 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34081 · Security Note
• https://osv.dev/vulnerability/GHSA-wgx7-jp56-65mq · Vendor Advisory
• https://github.com/mantisbt/mantisbt · Note
• https://twitter.com/CVEnew/status/1790047135335109066 · Twitter Post
• https://twitter.com/oktsec/status/1809983092896960651 · Twitter Post