Количество 3
Количество 3
CVE-2026-44657
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, using show_inline=1 parameter and a valid file_show_inline_token CSRF token on file_download.php, an attacker can execute code by uploading a crafted XHTML attachment referencing a JavaScript attachment. This vulnerability is fixed in 2.28.2.
CVE-2026-44657
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior t ...
GHSA-p6fr-rxq7-xcg8
MantisBT Vulnerable to Stored XSS in File Download
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-44657 Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, using show_inline=1 parameter and a valid file_show_inline_token CSRF token on file_download.php, an attacker can execute code by uploading a crafted XHTML attachment referencing a JavaScript attachment. This vulnerability is fixed in 2.28.2. | 0% Низкий | 3 месяца назад | |
| CVE-2026-44657 Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior t ... | 0% Низкий | 3 месяца назад | |
| GHSA-p6fr-rxq7-xcg8 MantisBT Vulnerable to Stored XSS in File Download | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу