Mantis Bug Tracker (aka MantisBT) 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service (resource consumption) via a filter using a criteria, text search, and the "any condition" match type.

According to its version number, the MantisBT install hosted on the remote web server is affected by multiple vulnerabilities:

  - A flaw exists in the 'filter_api.php' script when     conducting a search query on the View Issues page.
    Combining filter criteria could lead to a denial     of service. (CVE-2013-1883)

  - A flaw exists that is due to the close button being     displayed even when disallowed.  This may allow a     remote attacker to change the ticket status without     sufficient privileges. (CVE-2013-1930)

  - A cross-site scripting vulnerability exists in the     'manage_proj_ver_delete.php' because the 'version'     parameter does not properly sanitize input.  This     flaw reportedly affects Mantis 1.2.14.
    (CVE-2013-1931)

This release fixes few security flaws, as detailed in CVE-2013-0197 CVE-2013-1883

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
66392	MantisBT 1.2.12 - 1.2.14 Multiple Vulnerabilities	Nessus	CGI abuses	Remote	medium
65758	Fedora 17 : mantis-1.2.14-1.fc17 (2013-4335)	Nessus	Fedora Local Security Checks	Local	medium
65757	Fedora 18 : mantis-1.2.14-1.fc18 (2013-4319)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2013-1883

high

Tenable Plugins

medium

medium

medium