XSS vulnerability that affects bootstrap

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-20676 · ADVISORY
• twbs/bootstrap · WEB
• twbs/bootstrap · WEB
• twbs/bootstrap · WEB
• twbs/bootstrap#27047 · WEB
• twbs/bootstrap commit 2a5ba23 · WEB
• lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E · WEB
• twbs/bootstrap · PACKAGE
• rubysec/ruby-advisory-db · WEB
• rubysec/ruby-advisory-db · WEB
• blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0 · WEB

org.webjars:bootstrap のその他の脆弱性

• CVE-2019-8331中 6.1In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
• CVE-2018-20677中 6.1In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
• CVE-2016-10735中 6.1In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than…
• CVE-2018-14042中 6.1In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
• CVE-2018-14041中 6.1In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.