bootstrap Cross-site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-20677 · ADVISORY
• twbs/bootstrap · WEB
• twbs/bootstrap · WEB
• twbs/bootstrap · WEB
• twbs/bootstrap#27047 · WEB
• twbs/bootstrap commit 2a5ba23 · WEB
• lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E · WEB
• lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E · WEB
• twbs/bootstrap · PACKAGE
• rubysec/ruby-advisory-db · WEB

Más vulnerabilidades de org.webjars:bootstrap

• CVE-2019-8331MEDIO 6.1In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
• CVE-2018-20676MEDIO 6.1In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
• CVE-2016-10735MEDIO 6.1In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than…
• CVE-2018-14042MEDIO 6.1In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
• CVE-2018-14041MEDIO 6.1In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.