CVE-2008-2276

MITTEL 6.8CVE-2008-2276 · Published 16/05/2008 · updated 16/06/2026

Kurz gesagt

CVE-2008-2276 ist eine Schwachstelle (MITTEL (CVSS 6.8)) in mantis (matisbt).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.1%, höher als bei 87.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
mantis matisbt	`= 1.1.1`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link.

References

marc.info
secunia.com/advisories/30270 · Vendor Advisory
secunia.com/advisories/31171
secunia.com/advisories/31972
sourceforge.net/project/shownotes.php
gentoo.org/security/en/glsa/glsa-200809-10.xml
securityfocus.com/bid/29297
vupen.com/english/advisories/2008/1598/references
exchange.xforce.ibmcloud.com/vulnerabilities/42447
exploit-db.com/exploits/5657
redhat.com/archives/fedora-package-announce/2008-July/msg00801.html
redhat.com/archives/fedora-package-announce/2008-July/msg00813.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free