CVE-2011-3358: XSS
Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.8 allow remote attackers to inject arbitrary web script or HTML via the (1) os, (2) osbuild, or (3) platform parameter to (a) bugreportpage.php or (b) bugupdateadvancedpage.php, related to use of the Projax library.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3358?
CVE-2011-3358 has been classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2011-3358?
To fix CVE-2011-3358, upgrade MantisBT to version 1.2.8 or later, which includes patches for these vulnerabilities.
What type of vulnerabilities are associated with CVE-2011-3358?
CVE-2011-3358 refers to multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary scripts.
Which versions of MantisBT are affected by CVE-2011-3358?
CVE-2011-3358 affects all MantisBT versions prior to 1.2.8, including versions from 0.19.3 to 1.2.6.
What parameters are involved in the CVE-2011-3358 vulnerability?
The CVE-2011-3358 vulnerability is related to the 'os', 'os_build', and 'platform' parameters in bug_report_page.php and bug_update_advanced_page.php.