Getbootstrap vulnerabilities
8 vulnerabilities
Known vulnerabilities in Getbootstrap products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Bootstrap7 vulnerabilities
- Bootstrap Sass1 vulnerabilities
PrioritiseCVE-2019-10842getbootstrap · bootstrap-sass +1 moregetbootstrap bootstrap-sassArbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed via eval(), which can be leveraged to execute arbitrary code on the target system. Note that there are three underscore characters in the cookie name. This is unrelated to the __cfduid cookie that is legitimately used by Cloudflare.CVSS10.0CriticalEPSS4.92%RoutineCVE-2019-8331f5 · big-ip_access_policy_manager +32 moref5 big-ip_access_policy_managerIn Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.CVSS6.1MediumEPSS16.40%RoutineCVE-2018-20677getbootstrap · bootstrap +18 moregetbootstrap bootstrapIn Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.CVSS6.1MediumEPSS3.98%RoutineCVE-2018-20676getbootstrap · bootstrap +18 moregetbootstrap bootstrapIn Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.CVSS6.1MediumEPSS3.84%RoutineCVE-2016-10735getbootstrap · bootstrap +17 moregetbootstrap bootstrapIn Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.CVSS6.1MediumEPSS4.04%RoutineCVE-2018-14042getbootstrap · bootstrap +18 moregetbootstrap bootstrapIn Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.CVSS6.1MediumEPSS4.01%RoutineCVE-2018-14041getbootstrap · bootstrap +8 moregetbootstrap bootstrapIn Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.CVSS6.1MediumEPSS4.31%RoutineCVE-2018-14040debian · debian_linux +18 moredebian debian_linuxIn Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.CVSS6.1MediumEPSS4.13%