CVE-2007-6611: XSS
Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bugreport.php.
Other sources
Description of problem:
From secunia:
seiji has discovered a vulnerability in Mantis, which can be exploited by malicious users to conduct script insertion attacks.
Input passed as the filename for the uploaded file in bugreport.php is not properly sanitised before being stored. This can be exploited to insert arbitrary HTML and script code, which is executed in a user's browser session in context of an affected site when the malicious filename is viewed in view.php.
Successful exploitation requires valid user credentials.
The vulnerability is confirmed in version 1.0.8. Other versions may also be affected.
Version-Release number of selected component (if applicable):
mantis-1.0.8-1
Additional info:
http://www.mantisbt.org/bugs/view.php?id=8679 http://sourceforge.net/project/shownotes.php?releaseid=562940
There are more things marked "[security]" in the release notes -- I suggest that you rebase the package on 1.1.0.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6611?
CVE-2007-6611 is rated as a medium severity vulnerability due to its potential to allow remote attackers to execute arbitrary JavaScript in victims' browsers.
How do I fix CVE-2007-6611?
To fix CVE-2007-6611, upgrade Mantis to version 1.1.0 or later.
What software is affected by CVE-2007-6611?
CVE-2007-6611 affects Mantis versions prior to 1.1.0.
What type of vulnerability is CVE-2007-6611?
CVE-2007-6611 is a cross-site scripting (XSS) vulnerability.
Can CVE-2007-6611 be exploited remotely?
Yes, CVE-2007-6611 can be exploited by remote attackers.