GHSA-3WQF-4X89-9G79 Bootstrap vulnerable to Cross-Site Scripting (XSS)

🗓️ 13 May 2022 01:07:54Reported by GoogleType

osv🔗 osv.dev👁 20 Views

Bootstrap versions from two point three zero to three point three.x and all four point x before four point one two are vulnerable to cross site scripting via the collapse data-parent attribute.

Reporter	Title	Published	Views	Family All 158
ibm	Security Bulletin: There are several vulnerabilities in Bootstrap used by IBM Maximo Asset Management	4 Apr 202316:40	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Mar 202503:41	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities in bootstrap.js may affect IBM Business Automation Workflow	5 Jun 202320:05	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance	11 Jan 202416:41	–	ibm
ibm	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	20 Nov 202413:56	–	ibm
ibm	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2020-28500, CVE-2021-23337, CVE-2020-8203	24 Apr 202314:58	–	ibm
ibm	Security Bulletin: IBM Storage Ceph is vulnerable to Cross-site Scripting in Ceph (CVE-2018-20677, CVE-2018-20676, CVE-2019-8331, CVE-2018-14042, CVE-2018-14040, CVE-2016-10735)	5 Aug 202420:00	–	ibm
ibm	Security Bulletin: API Connect V5 is impacted by vulnerabilities in Bootstrap (CVE-2018-14040 CVE-2018-14041 CVE-2018-14042)	23 Apr 201918:00	–	ibm
ibm	Security Bulletin:Vulnerabiilties in swagger-ui and Bootstrap affect watsonx.data	27 Feb 202513:28	–	ibm
ibm	Security Bulletin: Cross-Site Scripting (XSS) Vulnerability in data-target Attribute Handling in Bootstrap, affects watsonx.data	7 Apr 202611:00	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-14040
github	www.github.com/twbs/bootstrap/issues/26423
github	www.github.com/twbs/bootstrap/issues/26625
github	www.github.com/twbs/bootstrap/pull/26630
github	www.github.com/twbs/bootstrap-rubygem/commit/f34c43c936ac7d0ebb129289321d8c51cd56aed1
github	www.github.com/twbs/bootstrap/commit/149096016f70fd815540d62c0989fd99cdc809e0
github	www.github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
tenable	www.tenable.com/security/tns-2021-14
oracle	www.oracle.com/security-alerts/cpuApr2021.html
seclists	www.seclists.org/bugtraq/2019/May/18

04 Feb 2026 02:56Current

6.9Medium risk

Vulners AI Score6.9

CVSS 36.1

EPSS0.04135