CVE-2017-7897 : A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2)

A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit it) through crafted PATH_INFO in a URL, due to use of unsanitized $_SERVER['PHP_SELF'] to generate URLs.

Published 2017-04-18 17:59:00

Updated 2017-07-11 01:33:48

Source MITRE

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2017-7897

Mantisbt » Mantisbt » Version: 2.3.0
cpe:2.3:a:mantisbt:mantisbt:2.3.0:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 2.3.1
cpe:2.3:a:mantisbt:mantisbt:2.3.1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-7897

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 60 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-7897

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
6.1	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2017-7897

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-7897

https://github.com/mantisbt/mantisbt/pull/1094

Multiple XSS Fixes by quantumpacket · Pull Request #1094 · mantisbt/mantisbt · GitHub
Exploit;Patch;Vendor Advisory
http://www.securitytracker.com/id/1038278

MantisBT Input Validation Flaw in 'view_user_page.php' and 'my_view_page.php' Lets Remote Users Conduct Cross-Site Scripting Attacks - SecurityTracker
http://www.mantisbt.org/bugs/view.php?id=22742

0022742: CVE-2017-7897: XSS in timeline_inc.php (affects my_view_page.php and view_user_page.php) - MantisBT
Exploit;Issue Tracking
https://github.com/mantisbt/mantisbt/commit/a1c719313d61b07bbe8700005807b8195fdc32f1

Fix XSS in timeline_inc.php · mantisbt/mantisbt@a1c7193 · GitHub
Patch

Jump to

Vulnerability Details : CVE-2017-7897

Products affected by CVE-2017-7897

Exploit prediction scoring system (EPSS) score for CVE-2017-7897

CVSS scores for CVE-2017-7897

CWE ids for CVE-2017-7897

References for CVE-2017-7897