Lucene search
GoogleOSV:CVE-2020-25288HistorySep 30, 2020 - 9:15 p.m.
CVE-2020-25288
2020-09-3021:15:13
Google
osv.dev
4
An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafted Regular Expression property is used, improper escaping of the corresponding form input’s pattern attribute allows HTML injection and, if CSP settings permit, execution of arbitrary JavaScript.
Related
prion
prion
Design/Logic Flaw
2020-09-30 21:15:00
ubuntucve
ubuntucve
CVE-2020-25288
2020-09-30 00:00:00
cve
cve
CVE-2020-25288
2020-09-30 21:15:13
cvelist
cvelist
CVE-2020-25288
2020-09-30 20:26:59
nvd
nvd
CVE-2020-25288
2020-09-30 21:15:13
freebsd
freebsd
mantis -- multiple vulnerabilities
2020-09-13 00:00:00
openvas
openvas
MantisBT < 2.24.3 Multiple Vulnerabilities - Windows
2020-10-02 00:00:00
MantisBT < 2.24.3 Multiple Vulnerabilities - Linux
2020-10-02 00:00:00
nessus
nessus