{"id":"CVE-2017-6973","aliases":["EUVD-2017-16011","GHSA-v7qf-22rw-chph"],"status":"published","title":"MantisBT XSS via adm_config_report.php's action parameter","description":"A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.","severity":{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00929,"percentile":0.60784,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2017-03-31T04:26:00Z","modified":"2026-10-24T10:30:44Z","fixes":[{"ecosystem":"Packagist","package":"mantisbt/mantisbt","fixed_in":["1.3.8","2.1.2","2.2.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"mantisbt/mantisbt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"mantisbt/mantisbt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.1.2"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"mantisbt/mantisbt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.2"}]}]},{"source":"osv","ecosystem":"Packagist","package":"mantisbt/mantisbt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8"}]}]},{"source":"osv","ecosystem":"Packagist","package":"mantisbt/mantisbt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.1.2"}]}]},{"source":"osv","ecosystem":"Packagist","package":"mantisbt/mantisbt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.2"}]}]}],"products":[{"vendor":"mantisbt","product":"mantisbt"}],"references":[{"url":"http://openwall.com/lists/oss-security/2017/03/30/4","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"http://www.securitytracker.com/id/1038169","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.mantisbt.org/bugs/view.php?id=22537","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Vendor Advisory","fix","web"]},{"url":"http://www.securityfocus.com/bid/97252","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6973","tags":["advisory"]},{"url":"https://github.com/mantisbt/mantisbt/commit/034cd07b47af37366fc7b726cb4a4f971d3d3fb9","tags":["web"]},{"url":"https://github.com/mantisbt/mantisbt/commit/15e52e84c389afe8b03ed3cdb59b6549257ed197","tags":["web"]},{"url":"https://github.com/mantisbt/mantisbt/commit/da74c5aa02bcf21cfaab1180f892c22415e5fea6","tags":["web"]},{"url":"https://github.com/advisories/GHSA-v7qf-22rw-chph"},{"url":"https://github.com/mantisbt/mantisbt","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2017-6973","description":"A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.","status":"published","published":"2017-03-31T04:26:00Z","modified":"2024-08-05T15:49:02.931Z","updated_at":"2026-11-02T14:33:16.578111Z"}],"euvd":[{"id":"EUVD-2017-16011","description":"A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.","status":"published","published":"2017-03-31T04:26:00Z","modified":"2024-08-05T15:49:02Z","updated_at":"2026-11-03T02:39:10.49179Z"}],"ghsa":[{"id":"GHSA-v7qf-22rw-chph","title":"MantisBT XSS via adm_config_report.php's action parameter","description":"A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.","status":"published","published":"2022-05-17T02:30:07Z","modified":"2025-06-11T18:52:40Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:38:46.901955Z"}],"nvd":[{"id":"CVE-2017-6973","description":"A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.","status":"published","published":"2017-03-31T04:59:00.22Z","modified":"2026-06-17T01:23:24.577Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:03:44.86906Z"}],"osv":[{"id":"CVE-2017-6973","description":"A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.","status":"published","published":"2017-03-31T04:59:00.22Z","modified":"2026-10-24T10:30:44.675823943Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"GHSA-v7qf-22rw-chph","title":"MantisBT XSS via adm_config_report.php's action parameter","description":"A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.","status":"published","published":"2022-05-17T02:30:07Z","modified":"2025-06-11T19:57:18.583919Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:56.981655Z"}]}}