CVE-2022-28508

MEDIUMNuclei

MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php

Title source: GitHub Advisory
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-28508 has a selected CVSS score of 6.1 (medium); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

mantisbt/mantisbt

Browse Packagist / mantisbt/mantisbt
GitHub AdvisoryThrough 2.25.2affected

Proofs of concept

1

Repository PoCs

GitHubYSah44/CVE-2022-28508Repository PoCby YSah444Not analyzed1 file

2.0 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMMantisBT < 2.25.2 - Cross-Site ScriptingCVSS 6.1

MantisBT before 2.25.2 contains a cross-site scripting vulnerability in browser_search_plugin.php. The application does not properly sanitize the 'type' parameter, which allows attackers to inject arbitrary web script or HTML via a crafted URL.

Impact

Successful exploitation allows attackers to execute arbitrary JavaScript code in the context of a victim's browser,potentially leading to session hijacking, credential theft, or phishing attacks.

Remediation

Upgrade to MantisBT version 2.25.2 or later which contains the fix for this vulnerability.If upgrading is not immediately possible, restrict access to the browser_search_plugin.php endpoint.

WeaknessesCWE-79
Authorsritikchaddha
Template tagscvecve2022mantisbtxssopensearchvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shodan: title:"MantisBT"
FOFA: title="MantisBT"
https://github.com/YavuzSahbaz/CVE-2022-28508/blob/main/MantisBT%202.25.2%20XSS%20vulnurability https://www.mantisbt.org/bugs/changelog_page.php https://nvd.nist.gov/vuln/detail/CVE-2022-28508

Source: ProjectDiscovery

References

5