CVE-2016-7111

原始描述

MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

受影响的软件

• MantisBT * 仓库或软件包匹配

详情

发布日期

2017-02-18

最后修改

2024-08-06

参考资料

• cve.org/CVE-2016-7111
• nvd.nist.gov/vuln/detail/CVE-2016-7111
• www.openwall.com/lists/oss-security/2016/08/28/1
• www.openwall.com/lists/oss-security/2016/08/29/2
• github.com/mantisbt/mantisbt/commit/b3511d2f
• mantisbt.org/bugs/view.php?id=21263