PT-2018-3486 · Twitter · Bootstrap

Published 2018-07-13 · Updated 2021-06-14 · CVE-2018-14041

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Bootstrap versions prior to 4.1.2

Description: The issue is related to the ScrollSpy plugin in Bootstrap, where a lack of protection in the web page structure allows for cross-site scripting (XSS) attacks. This can be exploited by a remote attacker to perform inter-site script attacks. The vulnerability is specifically related to the data-target property of scrollspy.

Recommendations: For versions prior to 4.1.2, update to version 4.1.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the data-target property in the scrollspy plugin to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2020-02248

CVE-2018-14041

GHSA-PJ7M-G53M-7638

OPENSUSE-SU-2024:11242-1

RHSA-2023:0552

RHSA-2023:0553

RHSA-2023:0554

RHSA-2023:5693

Affected Products

Bootstrap

References · 31

• 🔥 https://github.com/twbs/bootstrap/issues/26627 · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml · Exploit
• https://github.com/twbs/bootstrap/pull/26630 · Patch
• https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1456 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14041 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14041 · Security Note
• https://bdu.fstec.ru/vul/2020-02248 · Security Note
• https://osv.dev/vulnerability/GHSA-pj7m-g53m-7638 · Vendor Advisory
• https://github.com/twbs/bootstrap/issues/26423 · Note
• https://github.com/twbs/bootstrap · Note
• https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E · Note
• https://typo3.org/security/advisory/typo3-core-sa-2019-006 · Note
• http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html · Note