CVE-2013-1931: XSS

Published Oct 31, 2019

Updated

A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.

Affected Software

4 affected components

debian/mantis

MantisBT mantisbt=1.2.14

Fedoraproject Fedora=17

Fedoraproject Fedora=18

Remediation

Patch Available

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1931

Event History

Oct 31, 2019

CVE Published

via MITRE·07:05 PM

Data Sourced

via MITRE·07:05 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2013-1931?

CVE-2013-1931 is a cross-site scripting (XSS) vulnerability in MantisBT 1.2.14.

How does CVE-2013-1931 affect MantisBT?

CVE-2013-1931 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.

What is the severity of CVE-2013-1931?

CVE-2013-1931 has a severity rating of 6.1, which is considered medium.

How can I fix CVE-2013-1931?

Updating MantisBT to version 1.2.15 or later will fix CVE-2013-1931.

Are there any additional references for CVE-2013-1931?

Yes, you can find additional references for CVE-2013-1931 at the following links: [link1](http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103438.html) and [link2](http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html), as well as [link3](http://www.openwall.com/lists/oss-security/2013/04/06/4).