CVE-2020-8981 | BDVDB-2026-130962 Detail

Description#

A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. The repo_delete.php Delete Repository page allows execution of arbitrary code via a repo name (if CSP settings permit it). This is related to CVE-2018-16362.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/mantisbt-plugins/source-integration/issues/338
https://github.com/mantisbt-plugins/source-integration/commit/270675c964c675829fe010f9f0830521dc0835f0

Exploit#

No public exploit known

History#

Version 12020-02-13Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.