GHSA-rg8f-5p7x-m6wv

MantisBT CSV Injection unprivileged user access in csv_export.php

Source: GitHub Advisory Database (reviewed) High CVE-2021-43257

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	mantisbt/mantisbt	< 2.25.3	2.25.3

Details

As written in the advisory (Markdown source, shown as plain text).

Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-43257 advisory
https://github.com/mantisbt/mantisbt/commit/7f4534c723e3162b8784aebda4836324041dbc3e web
https://github.com/mantisbt/mantisbt/commit/99eb8d41cbacc703f88807898dcc9ac55eec0f15 web
https://github.com/mantisbt/mantisbt package
https://www.mantisbt.org/bugs/view.php?id=29130 web