CVE-2018-16514
1 advisory.
Packagist/mantisbt/mantisbt CVE-2018-16514: medium 6.1
MantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO
Action: Upgrade mantisbt/mantisbt to 2.17.1 or later.
composer require mantisbt/mantisbt:2.17.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.17.1 | - |
Fixed versions
| 2.17.1 |
Sources
- osv: GHSA-3qv7-98vm-xx2v
- https://nvd.nist.gov/vuln/detail/CVE-2018-16514
- https://github.com/mantisbt/mantisbt/commit/66091a42626631a3063774eb0fb8a4218ab22fd4
- https://github.com/mantisbt/mantisbt
- https://github.com/mantisbt/mantisbt/blob/006cd0cd90c37097e1a065fd3e59ce2534490834/core/filter_form_api.php#L2779
- https://mantisbt.org/bugs/view.php?id=24731
CVE-2018-16514 · published · modified · JSON