Packagist/mantisbt/mantisbt CVE-2017-7241: medium 4.8, EPSS 0.93%
MantisBT XSS via move_attachments_page.php
Action: Upgrade mantisbt/mantisbt to 1.3.9 or later.
composer require mantisbt/mantisbt:1.3.9composer require mantisbt/mantisbt:2.1.3composer require mantisbt/mantisbt:2.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.9 | - |
| 2.0.0 | 2.1.3 | - |
| 2.2.0 | 2.2.3 | - |
Fixed versions
| 1.3.9 | 2.1.3 | 2.2.3 |
Sources
- osv: GHSA-x53v-v9xp-gf6g
- https://nvd.nist.gov/vuln/detail/CVE-2017-7241
- https://github.com/mantisbt/mantisbt/commit/2d55c6476e939db021128b3995c28dcae05b09a4
- https://github.com/mantisbt/mantisbt/commit/d31841c806a3c8379fcf6c9d9559451270b0f1cb
- https://github.com/mantisbt/mantisbt/commit/ecef0e9b523a460709e8feedfce72f05bb30b992
- https://github.com/mantisbt/mantisbt
- http://www.mantisbt.org/bugs/view.php?id=22568
CVE-2017-7241 · published · modified · JSON