CVE-2019-15715: OS Command Injection
First published: Wed Oct 09 2019(Updated: )
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mantisbt Mantisbt | >=1.0.0<1.3.20 | |
| Mantisbt Mantisbt | >=2.0.0<2.22.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html
- https://github.com/mantisbt/mantisbt/commit/5fb979604d88c630343b3eaf2b435cd41918c501
- https://github.com/mantisbt/mantisbt/commit/7092573fac31eff41823f13540324db167c8bd52
- https://github.com/mantisbt/mantisbt/commit/cebfb9acb3686e8904d80bd4bc80720b54ba08e5
- https://github.com/mantisbt/mantisbt/commit/fc7668c8e45db55fc3a4b991ea99d2b80861a14c
- https://mantisbt.org/bugs/changelog_page.php?project=mantisbt
- https://mantisbt.org/bugs/view.php?id=26091
- https://mantisbt.org/bugs/view.php?id=26162
Frequently Asked Questions
What is CVE-2019-15715?
CVE-2019-15715 is a vulnerability in MantisBT versions before 1.3.20 and 2.22.1 that allows Post Authentication Command Injection, leading to Remote Code Execution.
How severe is CVE-2019-15715?
CVE-2019-15715 has a severity score of 7.2, which is considered high.
How does CVE-2019-15715 affect MantisBT?
CVE-2019-15715 affects MantisBT versions before 1.3.20 and 2.22.1, allowing Post Authentication Command Injection, leading to Remote Code Execution.
How can I fix CVE-2019-15715?
To fix CVE-2019-15715, upgrade MantisBT to version 1.3.20 or 2.22.1 or later.
Where can I find more information about CVE-2019-15715?
More information about CVE-2019-15715 can be found at the following references: [Link 1](http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html), [Link 2](https://github.com/mantisbt/mantisbt/commit/5fb979604d88c630343b3eaf2b435cd41918c501), [Link 3](https://github.com/mantisbt/mantisbt/commit/7092573fac31eff41823f13540324db167c8bd52).
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/mantisbt
- canonical/mantisbt mantisbt
- version/mantisbt mantisbt/1.0.0
- version/mantisbt mantisbt/2.0.0