CVE-2018-17782
1 advisory.
Packagist/mantisbt/mantisbt CVE-2018-17782: medium 5.4, EPSS 0.69%
MantisBT allows XSS via the Manage Filter page
Action: Upgrade mantisbt/mantisbt to 2.17.2 or later.
composer require mantisbt/mantisbt:2.17.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.17.2 | - |
Fixed versions
| 2.17.2 |
Sources
- osv: GHSA-ggjm-7m5f-7xjv
- https://nvd.nist.gov/vuln/detail/CVE-2018-17782
- https://github.com/mantisbt/mantisbt/commit/72ab020a42a35fd341e983a25849f8277bb34044
- https://github.com/mantisbt/mantisbt
- https://mantisbt.org/blog/archives/mantisbt/613
- https://mantisbt.org/bugs/view.php?id=24813
CVE-2018-17782 · published · modified · JSON