CVE-2018-17783: MantisBT Cross-Site Scripting Vulnerability in Edit Filter Page
Summary
CVE-2018-17783: MantisBT allows XSS via Edit Filter page. Affects mantisbt/mantisbt versions >= 2.1.0, < 2.17.2. Fixed in 2.17.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MantisBT is an open-source bug tracking system that provides a user-friendly interface for managing software projects. It allows users to report issues, track progress, and collaborate on software development. Despite its robust features, MantisBT versions 2.1.0 to 2.17.1 are vulnerable to a cross-site scripting (XSS) attack, which can compromise user data and application integrity.
Vulnerability Detail
The vulnerability arises from improper handling of user input in the Edit Filter page (manage_filter_edit page.php). Attackers can exploit this flaw by injecting malicious scripts through a crafted project name, potentially leading to unauthorized actions or data theft if the Content Security Policy (CSP) settings are permissive. This vulnerability is classified under CWE-79, indicating a cross-site scripting issue that can affect the security of web applications.
How To Fix
Minimum fixed version
2.17.2
This is the first release that contains the fix.
composer require mantisbt/mantisbt:2.17.2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict user access to the Edit Filter page by adjusting user permissions, thereby limiting the potential for exploitation until the software is updated.
Conclusion
The CVE-2018-17783 vulnerability in MantisBT poses a significant risk due to its potential for cross-site scripting attacks. Users are strongly advised to update to version 2.17.2 or later to mitigate this risk. Additionally, utilizing tools like Vulert can help monitor and manage vulnerabilities in your software effectively.
See every vulnerability recorded for mantisbt/mantisbt →
FAQ
CVE-2018-17783 is a cross-site scripting vulnerability found in MantisBT versions 2.1.0 to 2.17.1, allowing attackers to inject malicious scripts via the Edit Filter page.
If you are using MantisBT version 2.1.0 to 2.17.1, your installation is vulnerable. You can check your version in the application settings or by using Vulert's playground at Vulert Scanner.
The risks include unauthorized access to user data, potential data theft, and the ability for attackers to perform actions on behalf of users if exploited successfully.
Yes, you can temporarily restrict access to the Edit Filter page by modifying user permissions until you can apply the necessary updates.
Vulert is a monitoring tool that uses the composer.lock file to track open-source vulnerabilities in your software. It provides real-time alerts and can help you determine if your application is affected by vulnerabilities like CVE-2018-17783.
Related vulnerabilities
Recent vulnerabilities recorded for mantisbt/mantisbt.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.