Mantisbt

Source Integration

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2020-36192

Exploit
  • EPSS 0.23%
  • Published 18.01.2021 20:15:12
  • Last modified 21.11.2024 05:28:58

An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private Project), if they are attached to an existing Chang...

6.1

CVE-2020-8981

  • EPSS 0.45%
  • Published 13.02.2020 17:15:29
  • Last modified 21.11.2024 05:39:46

A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. The repo_delete.php Delete Repository page allows execution of arbitrary code via a repo name (if CSP settings ...

6.1

CVE-2018-16362

  • EPSS 0.44%
  • Published 02.09.2018 22:29:00
  • Last modified 21.11.2024 03:52:36

An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages allows execution of arbitrary code (if CSP settings...

6.1

CVE-2017-6958

  • EPSS 0.24%
  • Published 17.03.2017 09:59:00
  • Last modified 20.04.2025 01:37:25

An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by crafting any valid parameter.