MantisBT Cross-Site Request Forgery / Open Redirection Vulnerability Fixed by 2.4.1/2.3.3/1.3.11
Description
(#A vulnerability has been identified in MantisBT.#A remote attacker could exploit it in order to:#- inject arbitrary permalink in the "url" parameter of the "permalink_page.php" page through cross-site request forgery attacks, via a specially crafted form on a malicious website triggering the vulnerability#- conduct an open redirect attack via the "return" parameter of the "login_page.php" page, leading to the redirection of the user to an arbitrary website.##This vulnerability stems from a missing backslash check in "string_api.php".##Proofs of concept are available.##The mantis packages provided by Debian Wheezy 7 are vulnerable.)
