CVE-2017-12062

An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2

published August 1, 2017

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03904 · 90.2th percentile
Published
2017-08-01T15:00Z
EPSS history
Timeline
  • 01 AUG 15:00Z
    An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2
    cvelistv5