Cross site scripting

2018-10-3018:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

29.2%

JSON

A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.

CPENameOperatorVersion
mantisbtge2.1.0
mantisbtle2.17.1

CPE	Name	Operator	Version
	mantisbt	ge	2.1.0
	mantisbt	le	2.17.1

References

mantisbt.org/blog/archives/mantisbt/613

mantisbt.org/bugs/view.php?id=24814

0.001 Low

EPSS

Percentile

29.2%

JSON

Related for PRION:CVE-2018-17783