Cross site scripting

2006-02-1311:06:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.8%

JSON

Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced, but not accessible to the general public.

CPENameOperatorVersion
mantiseq0.18.2
mantiseq0.18.0-a2
mantiseq0.18.0-a4
mantiseq0.18
mantiseq1.0.0-rc3
mantiseq1.0.0-rc1
mantiseq0.19.3
mantiseq1.0.0-rc2
mantiseq0.19.0-a1
mantiseq0.17.497

Name	Operator	Version
mantis	eq	0.18.2
mantis	eq	0.18.0-a2
mantis	eq	0.18.0-a4
mantis	eq	0.18
mantis	eq	1.0.0-rc3
mantis	eq	1.0.0-rc1
mantis	eq	0.19.3
mantis	eq	1.0.0-rc2
mantis	eq	0.19.0-a1
mantis	eq	0.17.497