CVE-2022-26144: MantisBT vulnerable to XSS due to improper escape in manage_plugin_page.php and manage_plugin_uninstall.php
An XSS issue was discovered in MantisBT before 2.25.3. Improper escaping of a Plugin name allows execution of arbitrary code (if CSP allows it) in managepluginpage.php and managepluginuninstall.php when a crafted plugin is installed.
Other sources
MantisBT vulnerable to XSS due to improper escape in managepluginpage.php and managepluginuninstall.php
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/mantisbt/mantisbtto a version that resolves this vulnerability.Fixed in 2.25.3 - Upgrade
Upgrade
MantisBTto a version that resolves this vulnerability.Fixed in 2.25.3
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-26144.
What is the severity level of CVE-2022-26144?
The severity level of CVE-2022-26144 is medium (6.1).
What is the affected software version of CVE-2022-26144?
The affected software version of CVE-2022-26144 is MantisBT before 2.25.3.
How does the vulnerability CVE-2022-26144 work?
The vulnerability CVE-2022-26144 is an XSS issue that allows execution of arbitrary code in manage_plugin_page.php and manage_plugin_uninstall.php if a crafted plugin is installed.
Is there a fix available for CVE-2022-26144?
Yes, the fix for CVE-2022-26144 is to upgrade to MantisBT version 2.25.3 or later.