Lucene search

K
cvelistMitreCVELIST:CVE-2014-9271
HistoryJan 09, 2015 - 6:00 p.m.

CVE-2014-9271

2015-01-0918:00:00
mitre
www.cve.org
1

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extension, related to inline attachments, as demonstrated by a .swf.jpeg filename.

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%