Lucene search

K
cvelistMitreCVELIST:CVE-2017-6973
HistoryMar 31, 2017 - 4:26 a.m.

CVE-2017-6973

2017-03-3104:26:00
mitre
www.cve.org

4.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted ‘action’ parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.

4.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

Related for CVELIST:CVE-2017-6973