CVE-2013-1883

Published: May 27, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Mantis Bug Tracker (aka MantisBT) 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service (resource consumption) via a filter using a criteria, text search, and the "any condition" match type.

Affected (3)

Products: Mantisbt: Mantisbt

Mantisbt

1 product

Mantisbt

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mantisbt Mantisbt	Version 1.2.12
Mantisbt Mantisbt	Version 1.2.13
Mantisbt Mantisbt	Version 1.2.14

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://www.mantisbt.org/bugs/view.php?id=15573

Source: secalert@redhat.com

Exploit

http://www.openwall.com/lists/oss-security/2013/03/22/2

Source: secalert@redhat.com

http://www.securityfocus.com/bid/58626

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=924340

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/83347

Source: secalert@redhat.com

https://github.com/mantisbt/mantisbt/commit/d16988c3ca232a7

Source: secalert@redhat.com

ExploitPatch

http://www.mantisbt.org/bugs/view.php?id=15573