Unscored DSA-2308-1 2 CVEs

mantis - several

Published Sep 12, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 5.0	mantis	1.1.6+dfsg-2lenny6
Debian · 6.0	mantis	1.1.8+dfsg-10squeeze1

Vulnerabilities 2

Unscored —

CVE-2011-3357

Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to i…

Sep 21, 2011
Unscored —

CVE-2011-3358

Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.8 allow remote attackers to inject arbitrary…

Sep 21, 2011