CVE-2017-6797 : A cross-site scripting (XSS) vulnerability in bug_change_status

A cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7 and 2.x before 2.2.1 allows remote attackers to inject arbitrary JavaScript via the 'action_type' parameter.

Published 2017-03-10 00:59:00

Updated 2019-03-19 00:35:48

Source MITRE

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2017-6797

Mantisbt » Mantisbt
Versions before (<) 1.3.7
cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt
Versions from including (>=) 2.0.0 and before (<) 2.2.1
cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-6797

EPSS FAQ

0.34%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 72 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-6797

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
6.1	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2017-6797

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-6797

http://www.mantisbt.org/bugs/view.php?id=22486

0022486: CVE-2017-6797: XSS in bug_change_status_page.php - MantisBT
Exploit;Issue Tracking;Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/03/10/1

oss-security - Advisory: XSS issues in MantisBT (CVE-2017-6797, CVE-2017-6799)
Exploit;Mailing List;Patch;Third Party Advisory

CVEs referencing this url
https://github.com/mantisbt/mantisbt/commit/a2d90ecabf3bcf3aa22ed9dbbecfd3d37902956f

Fix XSS in bug_change_status_page.php · mantisbt/mantisbt@a2d90ec · GitHub
Patch
http://www.securitytracker.com/id/1037978

MantisBT Input Validation Flaw in 'bug_change_status_page.php' Lets Remote Users Conduct Cross-Site Scripting Attacks - SecurityTracker
Third Party Advisory;VDB Entry
https://github.com/mantisbt/mantisbt/commit/c272c3f65da9677e505ff692b1f1e476b3afa56e

Fix XSS in bug_change_status_page.php · mantisbt/mantisbt@c272c3f · GitHub
Patch
http://www.securityfocus.com/bid/96818

MantisBT 'bug_change_status_page.php' Cross Site Scripting Vulnerability
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2017-6797

Products affected by CVE-2017-6797

Exploit prediction scoring system (EPSS) score for CVE-2017-6797

CVSS scores for CVE-2017-6797

CWE ids for CVE-2017-6797

References for CVE-2017-6797