Количество 4
Количество 4
CVE-2017-7897
A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit it) through crafted PATH_INFO in a URL, due to use of unsanitized $_SERVER['PHP_SELF'] to generate URLs.
CVE-2017-7897
A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit it) through crafted PATH_INFO in a URL, due to use of unsanitized $_SERVER['PHP_SELF'] to generate URLs.
CVE-2017-7897
A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x befo ...
GHSA-8r2m-qhff-jm2c
MantisBT XSS via my_view_page.php and view_user_page.php
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-7897 A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit it) through crafted PATH_INFO in a URL, due to use of unsanitized $_SERVER['PHP_SELF'] to generate URLs. | CVSS3: 6.1 | 0% Низкий | почти 9 лет назад |
 | CVE-2017-7897 A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit it) through crafted PATH_INFO in a URL, due to use of unsanitized $_SERVER['PHP_SELF'] to generate URLs. | CVSS3: 6.1 | 0% Низкий | почти 9 лет назад |
| CVE-2017-7897 A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x befo ... | CVSS3: 6.1 | 0% Низкий | почти 9 лет назад |
| GHSA-8r2m-qhff-jm2c MantisBT XSS via my_view_page.php and view_user_page.php | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу