CVE-2020-25830: MantisBT HTML Injection vulnerability
Summary
CVE-2020-25830: MantisBT HTML Injection vulnerability. Affects mantisbt/mantisbt versions < 2.24.3. Fixed in 2.24.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MantisBT is an open-source bug tracking system that helps software development teams manage and track issues throughout the software development lifecycle. It provides a web-based interface for users to report bugs, track their progress, and collaborate on issue resolution. MantisBT is widely used by organizations to streamline their bug tracking and issue management processes.
Vulnerability Detail
The MantisBT HTML Injection vulnerability, identified as CVE-2020-25830, allows an attacker to inject HTML code into a custom field's name. This vulnerability arises due to improper escaping of the custom field's name during an attempt to update it via the bug_actiongroup_page.php page. If the Content Security Policy (CSP) settings permit, the injected HTML code can lead to the execution of arbitrary JavaScript code. This could potentially enable an attacker to perform various malicious actions, such as stealing sensitive user information or performing unauthorized actions on behalf of the user.
How To Fix
Minimum fixed version
2.24.3
This is the first release that contains the fix.
composer require mantisbt/mantisbt:2.24.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately feasible, a temporary workaround is to enforce strict Content Security Policy (CSP) settings that disallow the execution of arbitrary JavaScript code. By configuring the CSP settings to restrict the allowed sources for scripts, the impact of the vulnerability can be mitigated. However, it is important to note that this workaround may limit the functionality of certain legitimate scripts and should only be considered as a temporary measure until the upgrade can be performed.
Conclusion
The MantisBT HTML Injection vulnerability (CVE-2020-25830) poses a moderate security risk, allowing attackers to inject malicious HTML and potentially execute arbitrary JavaScript code. To mitigate this vulnerability, it is crucial to upgrade to MantisBT version 2.24.3 or later, which includes the necessary fixes. In the meantime, enforcing strict Content Security Policy (CSP) settings can serve as a temporary workaround. For further support and assistance, please contact DevNack.com.
See every vulnerability recorded for mantisbt/mantisbt →
FAQ
MantisBT is an open-source bug tracking system used by software development teams to manage and track issues throughout the software development lifecycle.
The HTML Injection vulnerability in MantisBT allows an attacker to inject malicious HTML and potentially execute arbitrary JavaScript code. This can lead to various security risks, such as unauthorized access, data theft, and unauthorized actions on behalf of users.
To fix the HTML Injection vulnerability, it is recommended to upgrade to MantisBT version 2.24.3 or later. This version includes the necessary fixes to prevent HTML injection and ensure a secure bug tracking environment.
A temporary workaround for the HTML Injection vulnerability is to enforce strict Content Security Policy (CSP) settings that disallow the execution of arbitrary JavaScript code. However, this workaround may limit the functionality of certain legitimate scripts and should only be considered as a temporary measure until the upgrade can be performed.
For further support and assistance in fixing the HTML Injection vulnerability in MantisBT, you can reach out to info@devnack.com. Our team of experts will be happy to assist you in resolving the vulnerability and ensuring the security of your bug tracking system.
Related vulnerabilities
Recent vulnerabilities recorded for mantisbt/mantisbt.
