CVE-2014-9271

moderate-risk
Published 2015-01-09

Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extension, related to inline attachments, as demonstrated by a .swf.jpeg filename.

Do I need to act?

-
0.83% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.4/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

Debian Mantisbt

References (14)

Mailing List http://seclists.org/oss-sec/2014/q4/867
Mailing List http://seclists.org/oss-sec/2014/q4/902
Mailing List http://seclists.org/oss-sec/2014/q4/924
Third Party Advisory http://secunia.com/advisories/62101
Third Party Advisory http://www.debian.org/security/2015/dsa-3120
Patch https://github.com/mantisbt/mantisbt/commit/9fb8cf36f
Exploit https://www.mantisbt.org/bugs/view.php?id=17874
Mailing List http://seclists.org/oss-sec/2014/q4/867
Mailing List http://seclists.org/oss-sec/2014/q4/902
Mailing List http://seclists.org/oss-sec/2014/q4/924
Third Party Advisory http://secunia.com/advisories/62101
Third Party Advisory http://www.debian.org/security/2015/dsa-3120
Patch https://github.com/mantisbt/mantisbt/commit/9fb8cf36f
Exploit https://www.mantisbt.org/bugs/view.php?id=17874
48
/ 100
moderate-risk
Severity 21/34 · High
Exploitability 3/34 · Minimal
Exposure 24/34 · High