CVE

Id
93931  
CVE No.
CVE-2016-7111  
Status
Candidate  
Description
MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.  
Phase
Assigned (20160829)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794861 93931 CVE-2016-7111 MLIST:[oss-security] 20160827 MantisBT weakened CSP when using bundled Gravatar plugin  View
794862 93931 CVE-2016-7111 URL:http://www.openwall.com/lists/oss-security/2016/08/28/1  View
794863 93931 CVE-2016-7111 MLIST:[oss-security] 20160829 Re: MantisBT weakened CSP when using bundled Gravatar plugin  View
794864 93931 CVE-2016-7111 URL:http://www.openwall.com/lists/oss-security/2016/08/29/2  View
794865 93931 CVE-2016-7111 CONFIRM:https://github.com/mantisbt/mantisbt/commit/b3511d2f  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4407 JVNDB-2016-005180 libav の x86/rnd_template.c の put_no_rnd_pixels8_xy2_mmx 関数におけるサービス運用妨害 (DoS) の脆弱性 libav の x86/rnd_template.c の put_no_rnd_pixels8_xy2_mmx 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-7424 93931 4.3 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005180.html  View