CVE-2017-6973
1 advisory.
Packagist/mantisbt/mantisbt CVE-2017-6973: medium 4.8, EPSS 0.93%
MantisBT XSS via adm_config_report.php's action parameter
Action: Upgrade mantisbt/mantisbt to 1.3.8 or later.
composer require mantisbt/mantisbt:1.3.8composer require mantisbt/mantisbt:2.1.2composer require mantisbt/mantisbt:2.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.8 | - |
| 2.0.0 | 2.1.2 | - |
| 2.2.0 | 2.2.2 | - |
Fixed versions
| 1.3.8 | 2.1.2 | 2.2.2 |
Sources
- osv: GHSA-v7qf-22rw-chph
- https://nvd.nist.gov/vuln/detail/CVE-2017-6973
- https://github.com/mantisbt/mantisbt/commit/034cd07b47af37366fc7b726cb4a4f971d3d3fb9
- https://github.com/mantisbt/mantisbt/commit/15e52e84c389afe8b03ed3cdb59b6549257ed197
- https://github.com/mantisbt/mantisbt/commit/da74c5aa02bcf21cfaab1180f892c22415e5fea6
- https://github.com/mantisbt/mantisbt
- http://www.mantisbt.org/bugs/view.php?id=22537
CVE-2017-6973 · published · modified · JSON