Skip to content
Threat Feed

Tag

Attachment

1 brief RSS
high advisory

MantisBT Content Security Policy Bypass via Attachment Upload (CVE-2026-40597)

A content security policy bypass vulnerability, CVE-2026-40597, exists in MantisBT versions 2.28.1 and earlier, allowing an attacker to bypass the _script-src_ directive by uploading a crafted attachment that, when downloaded, executes as JavaScript due to MIME type sniffing, given a pre-existing XSS / HTML injection vulnerability.

mantisbt +1 csp-bypass xss attachment mime-sniffing
2r 1t