Lucene search
GoogleOSV:CVE-2020-35571HistoryFeb 22, 2021 - 3:15 a.m.
CVE-2020-35571
2021-02-2203:15:14
Google
osv.dev
6
mantisbt
custom field
unsanitized
csp settings
An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.
References
Related
prion
prion
Code injection
2021-02-22 03:15:00
cve
cve
CVE-2020-35571
2021-02-22 03:15:14
cvelist
cvelist
CVE-2020-35571
2021-02-22 02:23:53
nvd
nvd
CVE-2020-35571
2021-02-22 03:15:14
nessus
nessus
freebsd
freebsd
mantis -- multiple vulnerabilities
2020-11-10 00:00:00
openvas
openvas
MantisBT < 2.24.4 Multiple Vulnerabilities - Linux
2021-01-15 00:00:00
MantisBT < 2.24.4 Multiple Vulnerabilities - Windows
2021-01-15 00:00:00