CVE-2017-12061
1 advisory.
Packagist/mantisbt/mantisbt CVE-2017-12061: medium 6.1
MantisBT XSS allows unsanitized input via admin/install.php
Action: Upgrade mantisbt/mantisbt to 1.3.12 or later.
composer require mantisbt/mantisbt:1.3.12composer require mantisbt/mantisbt:2.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.12 | - |
| 2.0.0 | 2.5.2 | - |
Fixed versions
| 1.3.12 | 2.5.2 |
Sources
- osv: GHSA-98xr-mmq5-vc5h
- https://nvd.nist.gov/vuln/detail/CVE-2017-12061
- https://github.com/mantisbt/mantisbt/commit/17f9b94f031ba93ae2a727bca0e68458ecd08fb0
- https://github.com/mantisbt/mantisbt/commit/c73ae3d3d4dd4681489a9e697e8ade785e27cba5
- https://github.com/mantisbt/mantisbt
- https://mantisbt.org/bugs/view.php?id=23146
- https://web.archive.org/web/20170811053146/http://www.securitytracker.com/id/1039030
- http://openwall.com/lists/oss-security/2017/08/01/1
- http://openwall.com/lists/oss-security/2017/08/01/2
CVE-2017-12061 · published · modified · JSON