CVE-2024-34081mediumCWE-79

CVE-2024-34081: fallo de gravedad media en mantisbt

MantisBT Cross-site Scripting vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear mantisbt+ Monitorear mantisbt/mantisbt

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.6epss 0.6%
MantisBT (Mantis Bug Tracker) is an open source issue tracker. Improper escaping of a custom field's name allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript when resolving or closing issues (`bug_change_status_page.php`) belonging to a project linking said custom field, viewing issues (`view_all_bug_page.php`) when the custom field is displayed as a column, or printing issues (`print_all_bug_page.php`) when the custom field is displayed as a column. Version 2.26.2 contains a patch for the issue. As a workaround, ensure Custom Field Names do not contain HTML tags.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Productos afectados
mantisbt · mantisbt
CVEs relacionadas — mantisbt

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-30849CRITICALMantisBT SOAP API has an authentication bypass vulnerability on MySQLEPSS 1.8%CVE-2024-34077HIGHMantisBT user account takeover in the signup/reset password processEPSS 1.2%CVE-2024-23830HIGHMantisBT Host Header Injection vulnerabilityEPSS 1.0%CVE-2023-44394MEDIUMDisclosure of project names to unauthorized users in MantisBTEPSS 0.7%CVE-2024-34080MEDIUMMantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized ActorEPSS 0.7%CVE-2026-47156CRITICALMantisBT: SOAP API Authentication Bypass with Privilege Escalation to AdministratorEPSS 0.7%