Kurz gesagt
- CVE-2026-44657 ist eine Schwachstelle (HOCH (CVSS 7.5)) in mantisbt/mantisbt.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.35%, höher als bei 28.6% aller Schwachstellen.
- Abhilfe: auf 2.28.2 oder neuer aktualisieren.
Description
Using show_inline=1 parameter and a valid file_show_inline_token CSRF token on file_download.php, an attacker can execute code by uploading a crafted XHTML attachment referencing a JavaScript attachment.
Impact
Cross-site scripting
Patches
- 26647b2e68ba30b9d7987d4e03d7a16416684bc2
Workarounds
None
Credits
Thanks to siunam (Tang Cheuk Hei) for discovering and responsibly reporting the issue.
NVD description
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, using show_inline=1 parameter and a valid file_show_inline_token CSRF token on file_download.php, an attacker can execute code by uploading a crafted XHTML attachment referencing a JavaScript attachment. This vulnerability is fixed in 2.28.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free