Lucene search
PRIOn knowledge basePRION:CVE-2020-25288HistorySep 30, 2020 - 9:15 p.m.
Design/Logic Flaw
2020-09-3021:15:00
PRIOn knowledge base
www.prio-n.com
6
An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafted Regular Expression property is used, improper escaping of the corresponding form input’s pattern attribute allows HTML injection and, if CSP settings permit, execution of arbitrary JavaScript.
Related
ubuntucve
ubuntucve
CVE-2020-25288
2020-09-30 00:00:00
cve
cve
CVE-2020-25288
2020-09-30 21:15:13
osv
osv
CVE-2020-25288
2020-09-30 21:15:13
cvelist
cvelist
CVE-2020-25288
2020-09-30 20:26:59
nvd
nvd
CVE-2020-25288
2020-09-30 21:15:13
freebsd
freebsd
mantis -- multiple vulnerabilities
2020-09-13 00:00:00
openvas
openvas
MantisBT < 2.24.3 Multiple Vulnerabilities - Windows
2020-10-02 00:00:00
MantisBT < 2.24.3 Multiple Vulnerabilities - Linux
2020-10-02 00:00:00
nessus
nessus