FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mantis -- multiple vulnerabilities

Affected packages
	mantis-php74	<	2.25.6,1
	mantis-php80	<	2.25.6,1
	mantis-php81	<	2.25.6,1
	mantis-php82	<	2.25.6,1

Details

VuXML ID	bed545c6-bdb8-11ed-bca8-a33124f1beb1
Discovery	2023-01-06
Entry	2023-03-08

Mantis 2.25.6 release reports:

Security and maintenance release

0031086: Private issue summary disclosure (CVE-2023-22476)

0030772: Update (bundled) moment.js to 2.29.4 (CVE-2022-31129)

0030791: Allow adding relation type noopener/noreferrer to outgoing links

[source]

References

CVE Name	CVE-2022-31129
CVE Name	CVE-2023-22476
URL	https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-31129
URL	https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-22476