CVE-2017-12062

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-12062
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12062.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-12062
Aliases
Published
2017-08-01T15:29:00.593Z
Modified
2026-04-10T03:56:38.688440Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An XSS issue was discovered in manageuserpage.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled.

References

Affected packages

Git / github.com/mantisbt/mantisbt

Affected ranges

Type
GIT
Repo
https://github.com/mantisbt/mantisbt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9f117fd951fbde716077b1453e0ecba9dbdc588a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4d317bf6c92a2cf32644286b5f49b6c34988d973
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
67edb2ce5d720c28ebac4acf1d9d6f990c4eff99
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d4d0e851fbf2ec38532e045d2acec22b0e544f53
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b77f7b5783e270066cdf10dae36f6241ac1591c3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1abcbc10ea82aa36c2f2c2f38f43343d013749c4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e95a5db5f445ec39868b341a73416a8f9008c35
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a954bbdc7e53b98dcac51fcf8bc6cb41deaa0028
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
73a34c4af43358599ff62b01c1b1f23d75a0c76c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0c6dde3dea2ea43d1d38f72f44834436c6dd4d74
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
27b5b292c9814a40fdd5715fa499a82e29f6f866
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
afc31a63fd76ae68f8bc8e8516d4431cf10ea9c5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
990c773bab5cdc69d30cfd2be1824cb42e463ba2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d83c14a9cd3cdd898fd911dd904feacea7340ac6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
609e2522903b1cbec51c054beb2761927ec19d0f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
90d8895978e056caaef178df932dcfb827a3f14d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b1010be69bd6fc4b2dd091ce3ab93e1ac75d3396
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
063cce6182568cf2eba81e3ca59cdd67606e7bab
Fixed
9b5b71dadbeeeec27efea59f562ac5bd6d2673b7
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.1"
        }
    ]
}

Affected versions

release-1.*
release-1.2.0a1
release-1.2.0a2
release-1.2.0a3
release-1.2.0rc1
release-1.3.0-beta.1
release-1.3.0-beta.2
release-1.3.0-beta.3
release-1.3.0-rc.1
release-1.3.0-rc.2
release-2.*
release-2.0.0
release-2.0.0-beta.1
release-2.0.0-beta.2
release-2.0.0-beta.3
release-2.0.0-rc.1
release-2.0.0-rc.2
release-2.1.0
release-2.1.1
release-2.1.2
release-2.1.3
release-2.2.0
release-2.2.1
release-2.2.2
release-2.2.3
release-2.2.4
release-2.3.0
release-2.3.1
release-2.3.2
release-2.3.3
release-2.4.0
release-2.4.1
release-2.4.2
release-2.5.0
release-2.5.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12062.json"