{"action":"Upgrade mantisbt/mantisbt to 1.3.12 or later.","affected":[{"fixed":"1.3.12","introduced":"0"},{"fixed":"2.5.2","introduced":"2.0.0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2017-12061"],"ecosystem":"Packagist","epss":0.02937,"exploited":false,"fixed_versions":["1.3.12","2.5.2"],"ghsa_id":"GHSA-98xr-mmq5-vc5h","id":"tcs_01M5KEZVTERKRN9M4SX2SHDTT8","modified_at":"2025-05-30T15:13:33.405497Z","published_at":"2022-05-13T01:05:25Z","references":["https://osv.dev/vulnerability/GHSA-98xr-mmq5-vc5h","https://nvd.nist.gov/vuln/detail/CVE-2017-12061","https://github.com/mantisbt/mantisbt/commit/17f9b94f031ba93ae2a727bca0e68458ecd08fb0","https://github.com/mantisbt/mantisbt/commit/c73ae3d3d4dd4681489a9e697e8ade785e27cba5","https://github.com/mantisbt/mantisbt","https://mantisbt.org/bugs/view.php?id=23146","https://web.archive.org/web/20170811053146/http://www.securitytracker.com/id/1039030","http://openwall.com/lists/oss-security/2017/08/01/1","http://openwall.com/lists/oss-security/2017/08/01/2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-98xr-mmq5-vc5h","url":"https://osv.dev/vulnerability/GHSA-98xr-mmq5-vc5h"}],"summary":"MantisBT XSS allows unsanitized input via admin/install.php"}