CVE-2024-34081

MantisBT (Mantis Bug Tracker) is an open source issue tracker. Improper escaping of a custom field's name allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript when resolving or closing issues (`bug_change_status_page.php`) belonging to a project linking said custom field, viewing issues (`view_all_bug_page.php`) when the custom field is displayed as a column, or printing issues (`print_all_bug_page.php`) when the custom field is displayed as a column. Version 2.26.2 contains a patch for the issue. As a workaround, ensure Custom Field Names do not contain HTML tags.

• CWE-79
• CWE-79

• https://github.com/mantisbt/mantisbt/commit/447a521aae0f82f791b8116a14a20e276df739bePatch
• https://github.com/mantisbt/mantisbt/security/advisories/GHSA-wgx7-jp56-65mqPatch, Vendor Advisory
• https://mantisbt.org/bugs/view.php?id=34432Issue Tracking, Mitigation, Vendor Advisory
• https://github.com/mantisbt/mantisbt/commit/447a521aae0f82f791b8116a14a20e276df739bePatch
• https://github.com/mantisbt/mantisbt/security/advisories/GHSA-wgx7-jp56-65mqPatch, Vendor Advisory
• https://mantisbt.org/bugs/view.php?id=34432Issue Tracking, Mitigation, Vendor Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34075kurwov is a fast, dependency-free library for creating Marko…6.2
• CVE-2024-34077MantisBT (Mantis Bug Tracker) is an open source issue tracke…7.3
• CVE-2024-34078html-sanitizer is an allowlist-based HTML cleaner. If using …6.1
• CVE-2024-34079octo-sts is a GitHub App that acts like a Security Token Ser…3.7
• CVE-2024-3408man-group/dtale version 3.10.0 is vulnerable to an authentic…9.8
• CVE-2024-34080MantisBT (Mantis Bug Tracker) is an open source issue tracke…5.3
• CVE-2024-34082Grav is a file-based Web platform. Prior to version 1.7.46, …9.9
• CVE-2024-34083aiosmptd is a reimplementation of the Python stdlib smtpd.p…5.4
• CVE-2024-34084Minder's `HandleGithubWebhook` is susceptible to a denial of…7.5
• CVE-2024-34085A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-34086A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-34087An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ…9.8