medium6.1
CVE-2018-16362
An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT.
Impact
An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages allows execution of arbitrary code (if CSP settings permit it) via repo_manage_page.php or list.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mantisbt | Source Integration | before 1.5.9 from 2.0.0 before 2.1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/mantisbt-plugins/source-integration/issues/286
- https://github.com/mantisbt-plugins/source-integration/releases/tag/v1.5.9
- https://github.com/mantisbt-plugins/source-integration/releases/tag/v2.1.5
- https://github.com/mantisbt-plugins/source-integration/issues/286
- https://github.com/mantisbt-plugins/source-integration/releases/tag/v1.5.9
- https://github.com/mantisbt-plugins/source-integration/releases/tag/v2.1.5