CVE-2005-3091: XSS
Published Sep 28, 2005
·Updated
Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".
Affected Software
59 affected components
Mantis Mantis=0.9.0
Mantis Mantis=0.9.1
Mantis Mantis=0.10.0
Mantis Mantis=0.10.1
Mantis Mantis=0.10.2
Mantis Mantis=0.11.0
Mantis Mantis=0.11.1
Mantis Mantis=0.12.0
Mantis Mantis=0.13.0
Mantis Mantis=0.13.1
Mantis Mantis=0.14.0
Mantis Mantis=0.14.1
Mantis Mantis=0.14.2
Mantis Mantis=0.14.3
Mantis Mantis=0.14.4
Mantis Mantis=0.14.5
Mantis Mantis=0.14.6
Mantis Mantis=0.14.7
Mantis Mantis=0.14.8
Mantis Mantis=0.15.0
Mantis Mantis=0.15.1
Mantis Mantis=0.15.2
Mantis Mantis=0.15.3
Mantis Mantis=0.15.4
Mantis Mantis=0.15.5
Mantis Mantis=0.15.6
Mantis Mantis=0.15.7
Mantis Mantis=0.15.8
Mantis Mantis=0.15.9
Mantis Mantis=0.15.10
Mantis Mantis=0.15.11
Mantis Mantis=0.15.12
Mantis Mantis=0.16.0
Mantis Mantis=0.16.1
Mantis Mantis=0.17.0
Mantis Mantis=0.17.1
Mantis Mantis=0.17.2
Mantis Mantis=0.17.3
Mantis Mantis=0.17.4
Mantis Mantis=0.17.4a
Mantis Mantis=0.17.5
Mantis Mantis=0.18.0
Mantis Mantis=0.18.0_rc1
Mantis Mantis=0.18.0a1
Mantis Mantis=0.18.0a2
Mantis Mantis=0.18.0a3
Mantis Mantis=0.18.0a4
Mantis Mantis=0.18.1
Mantis Mantis=0.18.2
Mantis Mantis=0.18.3
Mantis Mantis=0.19.0
Mantis Mantis=0.19.0_rc1
Mantis Mantis=0.19.0a1
Mantis Mantis=0.19.0a2
Mantis Mantis=0.19.1
Mantis Mantis=0.19.2
Mantis Mantis=1.0.0a1
Mantis Mantis=1.0.0a2
Mantis Mantis=1.0.0a3
Event History
Sep 28, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3091?
CVE-2005-3091 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2005-3091?
To fix CVE-2005-3091, upgrade to Mantis versions 1.0.0rc1 or later, where the vulnerability is resolved.
3
Which versions of Mantis are affected by CVE-2005-3091?
CVE-2005-3091 affects Mantis versions prior to 1.0.0rc1, including 0.9.0 through 0.19.2.
4
What kind of exploit can be performed with CVE-2005-3091?
CVE-2005-3091 allows remote attackers to inject arbitrary web scripts or HTML into web pages viewed by users.
5
Is there a workaround for CVE-2005-3091?
While a definitive workaround is not available, restricting access or applying input validation may help mitigate the risk until an upgrade is feasible.