Linked Custom Fields
Approved changes feed: RSS · Atom
cpe:2.3:a:mantisbt:linked_custom_fields:*:*:*:*:*:mantisbt:*:*
part: a version: * update: *
| Vendor | Mantisbt (9be8c23a-b549-5ad5-a5b6-9beba90daced) |
|---|---|
| Product | Linked Custom Fields (92742f71-d40c-53db-bbd6-d0acb6a60381) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | mantisbt |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mantisbt-plugins/linkedcustomfields |
purl2cpe | 2026-06-01 10:12:58.593426 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-49802 |
vulnerable | 2026-06-08 06:16:10.511474 |
MantisBT LinkedCustomFields Cross-site Scripting vulnerability
MEDIUM (6.7)
The LinkedCustomFields plugin for MantisBT allows users to link values between two custom fields, creating linked drop-downs. Prior to version 2.0.1, cross-site scripting in the MantisBT LinkedCustomFields plugin allows Javascript execution, when a crafted Custom Field is linked via the plugin and displayed when reporting a new Issue or editing an existing one. This issue is fixed in version 2.0.1. As a workaround, one may utilize MantisBT's default Content Security Policy, which blocks script execution.
Published: 2023-12-11T21:11:53.407Z
Updated: 2024-08-28T15:12:57.432Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.