CVE-2018-16362 An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages a...
MediumCVSS 6.1
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages allows execution of arbitrary code (if CSP settings permit it) via repo_manage_page.php or list.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mantisbt source integration | < 1.5.9 | 1.5.9 |
| mantisbt source integration | >= 2.0.0, < 2.1.5 | 2.1.5 |
References
- github.com third-party-advisory
- github.com third-party-advisory
- github.com third-party-advisory