MantisBT CVE-2014-6316 Multiple URI Redirection Vulnerabilities

Bugtraq ID:	71478
Class:	Input Validation Error
CVE:	CVE-2014-6316
Remote:	Yes
Local:	No
Published:	Dec 03 2014 12:00AM
Updated:	Jan 12 2015 01:01AM
Credit:	Mathias Karlsson, Paul Richards, Ryan Giobbi, Shahee Mirza and Alejo Popovici
Vulnerable:	Mantisbt Mantisbt 1.2.9 Mantisbt Mantisbt 1.2.8 Mantisbt Mantisbt 1.2.7 Mantisbt Mantisbt 1.2.6 Mantisbt Mantisbt 1.2.4 Mantisbt Mantisbt 1.2.3 Mantisbt Mantisbt 1.2.2 Mantisbt Mantisbt 1.2.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

MantisBT CVE-2014-6316 Multiple URI Redirection Vulnerabilities

MantisBT is prone to multiple URI-redirection vulnerabilities.

An attacker can leverage these issues by constructing a URI that includes a malicious site redirection. When an unsuspecting victim follows the URI, they may be redirected to an attacker-controlled site; this may aid in phishing attacks.

MantisBT 1.2.0a3 through 1.2.17 are vulnerable.

MantisBT CVE-2014-6316 Multiple URI Redirection Vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting victim into following a malicious URI.

The following example URI is available:

http://www.example.com/login_page.php?return=http://www.example1.com

MantisBT CVE-2014-6316 Multiple URI Redirection Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

MantisBT CVE-2014-6316 Multiple URI Redirection Vulnerabilities

References: