Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/mantisbt/mantisbt@1.3.11
purl pkg:composer/mantisbt/mantisbt@1.3.11
Tags Ghost
Next non-vulnerable version 2.28.4
Latest non-vulnerable version 2.28.4
Risk score 2.8
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-98xr-mmq5-vc5h
Aliases:
CVE-2017-12061
MantisBT XSS allows unsanitized input via admin/install.php An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-9x76-mp7r-2xc5
MantisBT vulnerable to CSRF and Open Redirect attacks MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a … CVE-2017-7620