CVE-2015-2046

Summary

Cross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20.

Impact & exploitability

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: https://bugzilla.redhat.com/show_bug.cgi?id=1191130 ↗

Additional information

• NVD record
• https://bugzilla.redhat.com/show_bug.cgi?id=1191130Patch
• http://www.openwall.com/lists/oss-security/2015/02/21/1Advisory
• http://www.openwall.com/lists/oss-security/2015/02/21/2Advisory