MantisBT CVE-2015-1042 Incomplete Fix Multiple URI Redirection Vulnerabilities

Bugtraq ID:	71988
Class:	Input Validation Error
CVE:	CVE-2015-1042
Remote:	Yes
Local:	No
Published:	Jan 10 2015 12:00AM
Updated:	Jan 10 2015 12:00AM
Credit:	Alejo Popovici
Vulnerable:	Mantisbt Mantisbt 1.2.9 Mantisbt Mantisbt 1.2.8 Mantisbt Mantisbt 1.2.7 Mantisbt Mantisbt 1.2.6 Mantisbt Mantisbt 1.2.4 Mantisbt Mantisbt 1.2.3 Mantisbt Mantisbt 1.2.2 Mantisbt Mantisbt 1.2.1
Not Vulnerable:

MantisBT CVE-2015-1042 Incomplete Fix Multiple URI Redirection Vulnerabilities

MantisBT is prone to multiple URI-redirection vulnerabilities.

An attacker can leverage these issues by constructing a URI that includes a malicious site redirection. When an unsuspecting victim follows the URI, they may be redirected to an attacker-controlled site; this may aid in phishing attacks.

MantisBT 1.2.18 and prior are vulnerable.

MantisBT CVE-2015-1042 Incomplete Fix Multiple URI Redirection Vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting victim into following a malicious URI.

The following example URI is available:

https://example.com/mantis/login_page.php?return=http:/www.example1.com

MantisBT CVE-2015-1042 Incomplete Fix Multiple URI Redirection Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

MantisBT CVE-2015-1042 Incomplete Fix Multiple URI Redirection Vulnerabilities

References: