CVE-2011-3357: Path Traversal
Directory traversal vulnerability in bugactiongroupextpage.php in MantisBT before 1.2.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter, related to bugactiongrouppage.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3357?
CVE-2011-3357 is considered a medium severity vulnerability due to its potential to allow remote code execution through directory traversal.
How do I fix CVE-2011-3357?
To fix CVE-2011-3357, upgrade MantisBT to version 1.2.8 or later, where the vulnerability has been patched.
What versions of MantisBT are affected by CVE-2011-3357?
CVE-2011-3357 affects multiple versions of MantisBT, specifically those prior to version 1.2.8 including 0.19.4, 1.0.2, and 1.2.7.
What is a directory traversal vulnerability in the context of CVE-2011-3357?
A directory traversal vulnerability like CVE-2011-3357 allows attackers to access files and directories outside the intended directory by manipulating file path inputs.
Can CVE-2011-3357 lead to serious security risks?
Yes, CVE-2011-3357 can lead to serious security risks as it can allow remote attackers to execute arbitrary files on the server.