CVE-2018-14042
13.07.2018, 14:29
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
| Vendor | Product | Version |
|---|---|---|
| getbootstrap | bootstrap | 𝑥 < 3.4.0 |
| getbootstrap | bootstrap | 4.0.0 ≤ 𝑥 < 4.1.2 |
| getbootstrap | bootstrap | 4.0.0:alpha |
| getbootstrap | bootstrap | 4.0.0:alpha2 |
| getbootstrap | bootstrap | 4.0.0:alpha3 |
| getbootstrap | bootstrap | 4.0.0:alpha4 |
| getbootstrap | bootstrap | 4.0.0:alpha5 |
| getbootstrap | bootstrap | 4.0.0:alpha6 |
| getbootstrap | bootstrap | 4.0.0:beta |
| getbootstrap | bootstrap | 4.0.0:beta2 |
| getbootstrap | bootstrap | 4.0.0:beta3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| twitter-bootstrap |
| ||||||||||||||||||||||||||||||||
| twitter-bootstrap3 |
|
References