Source Integration Security Vulnerabilities and Issues — Source Integration CVE List

Lucene search

MantisbtSource Integration

3 matches found

CVE•added 2020/02/13 5:15 p.m.•44 views

CVE-2020-8981

A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. The repo_delete.php Delete Repository page allows execution of arbitrary code via a repo name (if CSP settings permit it). This is related to CVE-2018-16362.

6.1CVSS6AI score0.0046EPSS

CVE•added 2017/03/17 9:59 a.m.•31 views

CVE-2017-6958

An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by crafting any valid parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2018/09/02 10:29 p.m.•31 views

CVE-2018-16362

An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages allows execution of arbitrary code (if CSP settings permit it) via repo_manage_page.php or list.php.

6.1CVSS6.1AI score0.0046EPSS