CVE-2020-35571
22.02.2021, 03:15
An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.
| Vendor | Product | Version |
|---|---|---|
| mantisbt | mantisbt | 𝑥 ≤ 2.24.3 |
𝑥
= Vulnerable software versions