oss-sec mailing list archives

Re: MantisBT: XSS in custom fields management

From: Damien Regad <dregad () mantisbt org>
Date: Sat, 11 Jun 2016 20:37:05 +0200

On 2016-06-11 17:37, cve-assign wrote:

As far as we can tell, this is best interpreted as a single XSS
vulnerability


That was indeed my expectation.

Use CVE-2016-5364.


Thank you !

Damien

MantisBT: XSS in custom fields management Damien Regad (Jun 10)
- Re: MantisBT: XSS in custom fields management cve-assign (Jun 11)
  - Re: MantisBT: XSS in custom fields management Damien Regad (Jun 11)