MantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.php

Impact

An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled.

Affected packages

Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.

Original source description

References

• Security advisory nvd.nist.gov/vuln/detail/CVE-2017-12062
• Patch github.com/mantisbt/mantisbt/commit/9b5b71dadbeeeec27efea59f562ac5bd6d2673b7
• Source reference github.com/mantisbt/mantisbt
• Source reference mantisbt.org/bugs/view.php
• Security advisory openwall.com/lists/oss-security/2017/08/01/1
• Security advisory openwall.com/lists/oss-security/2017/08/01/2