CVE-2018-16362: XSS
An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages allows execution of arbitrary code (if CSP settings permit it) via repomanagepage.php or list.php.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-16362?
CVE-2018-16362 is a vulnerability in the Source Integration plugin for MantisBT that allows for cross-site scripting (XSS) attacks.
How can an attacker exploit CVE-2018-16362?
An attacker can exploit CVE-2018-16362 by injecting malicious code into the Manage Repository and Changesets List pages of the Source Integration plugin for MantisBT.
What is the severity of CVE-2018-16362?
The severity of CVE-2018-16362 is medium, with a CVSS score of 6.1.
Which versions of the Source Integration plugin are affected by CVE-2018-16362?
Versions before 1.5.9 and 2.x before 2.1.5 of the Source Integration plugin for MantisBT are affected by CVE-2018-16362.
How can I fix CVE-2018-16362?
To fix CVE-2018-16362, update the Source Integration plugin for MantisBT to version 1.5.9 or 2.1.5.