~ / search / GHSA-qghg-v7xv-q98q

GHSA-qghg-v7xv-q98q

MantisBT XSS through crafted SVG documents in file_download.php

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-33910

Packages

EcosystemPackageAffectedFixed in
Packagist mantisbt/mantisbt < 2.25.5 2.25.5

Details

As written in the advisory (Markdown source, shown as plain text).

An XSS vulnerability in MantisBT before 2.25.5 allows remote attackers to attach crafted SVG documents to issue reports or bugnotes. When a user or an admin clicks on the attachment, file_download.php opens the SVG document in a browser tab instead of downloading it as a file, causing the JavaScript code to execute.

References

External links from the advisory. They lead to third-party sites.