A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.

new upstream release, fixing security issues: CVE-2013-1930 (#948971) CVE-2013-1931 (#948975)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its version number, the MantisBT install hosted on the remote web server is affected by multiple vulnerabilities:

  - A flaw exists in the 'filter_api.php' script when     conducting a search query on the View Issues page.
    Combining filter criteria could lead to a denial     of service. (CVE-2013-1883)

  - A flaw exists that is due to the close button being     displayed even when disallowed.  This may allow a     remote attacker to change the ticket status without     sufficient privileges. (CVE-2013-1930)

  - A cross-site scripting vulnerability exists in the     'manage_proj_ver_delete.php' because the 'version'     parameter does not properly sanitize input.  This     flaw reportedly affects Mantis 1.2.14.
    (CVE-2013-1931)

ID	Name	Product	Family	Severity
69212	Fedora 19 : mantis-1.2.15-1.fc19 (2013-5801)	Nessus	Fedora Local Security Checks	medium
66392	MantisBT 1.2.12 - 1.2.14 Multiple Vulnerabilities	Nessus	CGI abuses	medium
66208	Fedora 17 : mantis-1.2.15-1.fc17 (2013-5833)	Nessus	Fedora Local Security Checks	medium
66207	Fedora 18 : mantis-1.2.15-1.fc18 (2013-5829)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-1931

medium

Tenable Plugins

medium

medium

medium

medium