CVE-2018-17783

2018-10-3018:29:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

JSON

A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.

CPENameOperatorVersion
mantisbteqrelease-2.2.1
mantisbteqrelease-2.8.0
mantisbteqrelease-2.16.0
mantisbteqrelease-2.14.0
mantisbteqrelease-2.3.2
mantisbteqrelease-2.10.0
mantisbteqrelease-2.13.1
mantisbteqrelease-2.3.1
mantisbteqrelease-2.1.0
mantisbteqrelease-2.17.1

Name	Operator	Version
mantisbt	eq	release-2.2.1
mantisbt	eq	release-2.8.0
mantisbt	eq	release-2.16.0
mantisbt	eq	release-2.14.0
mantisbt	eq	release-2.3.2
mantisbt	eq	release-2.10.0
mantisbt	eq	release-2.13.1
mantisbt	eq	release-2.3.1
mantisbt	eq	release-2.1.0
mantisbt	eq	release-2.17.1