diff --git a/advisories/github-reviewed/2022/05/GHSA-3qv7-98vm-xx2v/GHSA-3qv7-98vm-xx2v.json b/advisories/github-reviewed/2022/05/GHSA-3qv7-98vm-xx2v/GHSA-3qv7-98vm-xx2v.json new file mode 100644 index 00000000000..ebbc6b8743d --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-3qv7-98vm-xx2v/GHSA-3qv7-98vm-xx2v.json @@ -0,0 +1,72 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3qv7-98vm-xx2v", + "modified": "2025-05-29T15:23:15Z", + "published": "2022-05-24T16:48:31Z", + "aliases": [ + "CVE-2018-16514" + ], + "summary": "MantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO", + "details": "A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.php) in MantisBT 2.1.0 through 2.17.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-13055.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "mantisbt/mantisbt" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.1.0" + }, + { + "fixed": "2.17.1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 2.17.0" + } + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16514" + }, + { + "type": "WEB", + "url": "https://github.com/mantisbt/mantisbt/commit/66091a42626631a3063774eb0fb8a4218ab22fd4" + }, + { + "type": "PACKAGE", + "url": "https://github.com/mantisbt/mantisbt" + }, + { + "type": "WEB", + "url": "https://github.com/mantisbt/mantisbt/blob/006cd0cd90c37097e1a065fd3e59ce2534490834/core/filter_form_api.php#L2779" + }, + { + "type": "WEB", + "url": "https://mantisbt.org/bugs/view.php?id=24731" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2025-05-29T15:23:15Z", + "nvd_published_at": "2019-06-20T14:15:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-gg4j-279j-22ph/GHSA-gg4j-279j-22ph.json b/advisories/github-reviewed/2022/05/GHSA-gg4j-279j-22ph/GHSA-gg4j-279j-22ph.json similarity index 56% rename from advisories/unreviewed/2022/05/GHSA-gg4j-279j-22ph/GHSA-gg4j-279j-22ph.json rename to advisories/github-reviewed/2022/05/GHSA-gg4j-279j-22ph/GHSA-gg4j-279j-22ph.json index 0fed861c092..6e3a16c45d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg4j-279j-22ph/GHSA-gg4j-279j-22ph.json +++ b/advisories/github-reviewed/2022/05/GHSA-gg4j-279j-22ph/GHSA-gg4j-279j-22ph.json @@ -1,19 +1,40 @@ { "schema_version": "1.4.0", "id": "GHSA-gg4j-279j-22ph", - "modified": "2024-04-04T01:44:48Z", + "modified": "2025-05-29T15:23:48Z", "published": "2022-05-24T16:54:23Z", "aliases": [ "CVE-2019-15074" ], + "summary": "MantisBT allows cross-site scripting (XSS) via crafted filename", "details": "The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if CSP settings permit it) after uploading an attachment with a crafted filename. The code is executed for any user having visibility to the issue, whenever My View Page is displayed.", "severity": [ { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "mantisbt/mantisbt" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.21.2" + } + ] + } + ] } ], - "affected": [], "references": [ { "type": "ADVISORY", @@ -23,6 +44,10 @@ "type": "WEB", "url": "https://github.com/mantisbt/mantisbt/commit/9cee1971c498bbe0a72bca1c773fae50171d8c27" }, + { + "type": "PACKAGE", + "url": "https://github.com/mantisbt/mantisbt" + }, { "type": "WEB", "url": "https://mantisbt.org/bugs/view.php?id=25995" @@ -32,9 +57,9 @@ "cwe_ids": [ "CWE-79" ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2025-05-29T15:23:48Z", "nvd_published_at": "2019-08-21T19:15:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-v23g-wjvq-2fpf/GHSA-v23g-wjvq-2fpf.json b/advisories/github-reviewed/2022/05/GHSA-v23g-wjvq-2fpf/GHSA-v23g-wjvq-2fpf.json similarity index 62% rename from advisories/unreviewed/2022/05/GHSA-v23g-wjvq-2fpf/GHSA-v23g-wjvq-2fpf.json rename to advisories/github-reviewed/2022/05/GHSA-v23g-wjvq-2fpf/GHSA-v23g-wjvq-2fpf.json index 4d6479d1319..c2b16404759 100644 --- a/advisories/unreviewed/2022/05/GHSA-v23g-wjvq-2fpf/GHSA-v23g-wjvq-2fpf.json +++ b/advisories/github-reviewed/2022/05/GHSA-v23g-wjvq-2fpf/GHSA-v23g-wjvq-2fpf.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-v23g-wjvq-2fpf", - "modified": "2023-01-20T18:30:23Z", + "modified": "2025-05-29T15:24:09Z", "published": "2022-05-24T16:58:17Z", "aliases": [ "CVE-2019-15715" ], + "summary": "MantisBT Remote Code Execution", "details": "MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.", "severity": [ { @@ -13,7 +14,46 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "mantisbt/mantisbt" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.3.20" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "mantisbt/mantisbt" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.0.0" + }, + { + "fixed": "2.22.1" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -35,6 +75,10 @@ "type": "WEB", "url": "https://github.com/mantisbt/mantisbt/commit/fc7668c8e45db55fc3a4b991ea99d2b80861a14c" }, + { + "type": "PACKAGE", + "url": "https://github.com/mantisbt/mantisbt" + }, { "type": "WEB", "url": "https://mantisbt.org/bugs/changelog_page.php?project=mantisbt" @@ -57,8 +101,8 @@ "CWE-78" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-05-29T15:24:09Z", "nvd_published_at": "2019-10-09T20:15:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-3qv7-98vm-xx2v/GHSA-3qv7-98vm-xx2v.json b/advisories/unreviewed/2022/05/GHSA-3qv7-98vm-xx2v/GHSA-3qv7-98vm-xx2v.json deleted file mode 100644 index f72edecf928..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-3qv7-98vm-xx2v/GHSA-3qv7-98vm-xx2v.json +++ /dev/null @@ -1,36 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-3qv7-98vm-xx2v", - "modified": "2024-04-04T01:02:11Z", - "published": "2022-05-24T16:48:31Z", - "aliases": [ - "CVE-2018-16514" - ], - "details": "A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.php) in MantisBT 2.1.0 through 2.17.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-13055.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" - } - ], - "affected": [], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16514" - }, - { - "type": "WEB", - "url": "https://mantisbt.org/bugs/view.php?id=24731" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-79" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2019-06-20T14:15:00Z" - } -} \ No newline at end of file