Test ID:	1.3.6.1.4.1.25623.1.0.106612
Category:	Web application abuses
Title:	MantisBT < 1.3.1, 2.x < 2.0.0-beta.2 Weak Content Security Policy Vulnerability - Linux
Summary:	MantisBT is prone to a weak Content Security Policy vulnerability.
Description:	Summary: MantisBT is prone to a weak Content Security Policy vulnerability. Vulnerability Insight: MantisBT uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. Affected Software/OS: MantisBT versions prior to 1.3.1 and 2.x prior to 2.0.0-beta.2. Solution: Update to version 2.0.0-beta.2, 1.3.1 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7111 http://www.openwall.com/lists/oss-security/2016/08/28/1 http://www.openwall.com/lists/oss-security/2016/08/29/2
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.