Mantisbt

Source Integration

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2020-36192

Exploit
  • EPSS 0.23%
  • Veröffentlicht 18.01.2021 20:15:12
  • Zuletzt bearbeitet 21.11.2024 05:28:58

An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private Project), if they are attached to an existing Chang...

6.1

CVE-2020-8981

  • EPSS 0.45%
  • Veröffentlicht 13.02.2020 17:15:29
  • Zuletzt bearbeitet 21.11.2024 05:39:46

A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. The repo_delete.php Delete Repository page allows execution of arbitrary code via a repo name (if CSP settings ...

6.1

CVE-2018-16362

  • EPSS 0.44%
  • Veröffentlicht 02.09.2018 22:29:00
  • Zuletzt bearbeitet 21.11.2024 03:52:36

An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages allows execution of arbitrary code (if CSP settings...

6.1

CVE-2017-6958

  • EPSS 0.24%
  • Veröffentlicht 17.03.2017 09:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by crafting any valid parameter.