CPE Details
Getbootstrap Bootstrap 3.3.7
3.3.7
2019-05-07
13h47 +00:00
13h47 +00:00
2019-05-07
13h47 +00:00
13h47 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:getbootstrap:bootstrap:3.3.7:*:*:*:*:*:*:*
Informations
Vendor
getbootstrapProduct
bootstrapVersion
3.3.7Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded. | ||||
| In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute. | 6.1 |
Moyen |
||
| In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. | 6.1 |
Moyen |
||
| In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute. | 6.1 |
Moyen |
||
| In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. | 6.1 |
Moyen |
||
| In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute. | 6.1 |
Moyen |
||
| In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. | 6.1 |
Moyen |
