Back to search
CVE-2014-9269
Published: Jan 9, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Cross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x before 1.2.18, when Extended project browser is enabled, allows remote attackers to inject arbitrary web script or HTML via the project cookie.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://www.mantisbt.org/bugs/view.php?id=17890
x_refsource_CONFIRM
https://github.com/mantisbt/mantisbt/commit/511564cc
x_refsource_CONFIRM
62101
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20141201 CVE Request: Multiple XSS vulnerabilities in MantisBT
mailing-list
x_refsource_MLIST
[oss-security] 20141204 Re: CVE Request: Multiple XSS vulnerabilities in MantisBT
mailing-list
x_refsource_MLIST
DSA-3120
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now