Описание
MantisBT XSS in manage_custom_field_update.php
An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.
Пакеты
Наименование
mantisbt/mantisbt
composer
Затронутые версииВерсия исправления
<= 2.24.5
2.25.0
Связанные уязвимости
CVSS3: 6.1
nvd
почти 5 лет назад
An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.
CVSS3: 6.1
debian
почти 5 лет назад
An issue was discovered in MantisBT through 2.24.3. In the helper_ensu ...