PT-2018-12295 · Twitter +4 · Bootstrap +4

🗓️ 13 Jul 2018 00:00:00Reported by Positive TechnologiesType

XSS in Bootstrap collapse data-parent affects 2.3.0–3.4.0 and 4.0.0–4.1.1; update to 3.4.0+ or 4.1.2+.

Reporter	Title	Published	Views	Family All 2178
0day.today	jQuery 1.2 - Cross-Site Scripting Vulnerability	14 Apr 202100:00	–	zdt
0day.today	jQuery 1.0.3 - Cross-Site Scripting Vulnerability	14 Apr 202100:00	–	zdt
Rockylinux	idm:DL1 and idm:client security, bug fix, and enhancement update	3 Nov 202012:25	–	rocky
Rockylinux	pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update	3 Nov 202012:29	–	rocky
Rockylinux	idm:DL1 and idm:client security, bug fix, and enhancement update	18 May 202106:14	–	rocky
Rockylinux	pcs security, bug fix, and enhancement update	9 Nov 202108:21	–	rocky
Rockylinux	tbb security update	17 Mar 202520:16	–	rocky
Rockylinux	tbb security update	13 Feb 202520:34	–	rocky
Rockylinux	gcc-toolset-14-gcc security update	17 Mar 202520:16	–	rocky
Rockylinux	gcc security update	13 Feb 202520:34	–	rocky

Source	Link
github	www.github.com/twbs/bootstrap/issues/26625
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap-sass/CVE-2018-14040.yml
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14040.yml
github	www.github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC
github	www.github.com/sgdream/CVE-2020-1938
github	www.github.com/xindongzhuaizhuai/CVE-2020-1938
github	www.github.com/sv3nbeast/CVE-2020-1938-Tomact-file_include-file_read
github	www.github.com/laolisafe/CVE-2020-1938
github	www.github.com/0xAJ2K/CVE-2020-11022-CVE-2020-11023
github	www.github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat

13 Nov 2024 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.1 - 9.8

CVSS 27.5

CVSS 34.7 - 6.1

EPSS0.9927

SSVC