CVE-2018-17782: MantisBT XSS Vulnerability in Manage Filters Page
Summary
CVE-2018-17782: MantisBT allows XSS via the Manage Filter page. Affects mantisbt/mantisbt versions >= 2.1.0, < 2.17.2. Fixed in 2.17.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MantisBT is an open-source bug tracking system that helps teams manage software development and track issues efficiently. It offers features such as project management, issue tracking, and reporting. However, certain versions of MantisBT (2.1.0 to 2.17.1) are vulnerable to a cross-site scripting (XSS) attack, which can compromise the security of the application if exploited.
Vulnerability Detail
A cross-site scripting (XSS) vulnerability exists in the Manage Filters page (manage_filter_page.php) of MantisBT versions 2.1.0 through 2.17.1. This vulnerability allows remote attackers, provided they have the necessary access rights, to inject arbitrary code into the application through a crafted project name. If Content Security Policy (CSP) settings are not properly configured, this could lead to unauthorized actions or data exposure.
How To Fix
Minimum fixed version
2.17.2
This is the first release that contains the fix.
composer require mantisbt/mantisbt:2.17.2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the Manage Filters page to trusted users only, thereby minimizing the risk of exploitation until you can apply the patch.
Conclusion
The XSS vulnerability in MantisBT's Manage Filters page poses a significant risk to users of affected versions. It is crucial to update to the latest version to protect against potential attacks. Additionally, utilizing tools like Vulert can help monitor and alert for open-source vulnerabilities in your software.
See every vulnerability recorded for mantisbt/mantisbt →
FAQ
The CVSS score of this vulnerability is 5.4, indicating a moderate level of severity.
MantisBT versions 2.1.0 through 2.17.1 are affected by this XSS vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If exploited, this vulnerability could allow attackers to execute arbitrary scripts in the context of the user's session, potentially leading to data theft or unauthorized actions.
Yes, you can limit access to the Manage Filters page to only trusted users as a temporary measure until the patch is applied.
Related vulnerabilities
Recent vulnerabilities recorded for mantisbt/mantisbt.
