Lucene search

K
freebsdFreeBSDA83F25DF-D775-11E0-8BF1-003067B2972C
HistoryAug 18, 2011 - 12:00 a.m.

XSS issue in MantisBT

2011-08-1800:00:00
vuxml.freebsd.org
14

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.018 Low

EPSS

Percentile

88.1%

Net.Edit0r from BlACK Hat Group reported an XSS issue in
search.php. All MantisBT users (including anonymous users that
are not logged in to public bug trackers) could be impacted by
this vulnerability.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmantis= 1.2.0UNKNOWN
FreeBSDanynoarchmantis< 1.2.7UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.018 Low

EPSS

Percentile

88.1%

Related for A83F25DF-D775-11E0-8BF1-003067B2972C