You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
Mend Note: Converted from WS-2018-0021, on 2022-11-08.
dev-mend-for-github-combot
changed the title
bootstrap-3.3.7.min.js: 6 vulnerabilities (highest severity is: 6.1)
bootstrap-3.3.7.min.js: 6 vulnerabilities (highest severity is: 9.8)
Nov 25, 2024
dev-mend-for-github-combot
changed the title
bootstrap-3.3.7.min.js: 6 vulnerabilities (highest severity is: 9.8)
bootstrap-3.3.7.min.js: 6 vulnerabilities (highest severity is: 6.1)
Nov 25, 2024
dev-mend-for-github-combot
changed the title
bootstrap-3.3.7.min.js: 6 vulnerabilities (highest severity is: 6.1)
bootstrap-3.3.7.min.js: 7 vulnerabilities (highest severity is: 9.8)
Jan 16, 2025
dev-mend-for-github-combot
changed the title
bootstrap-3.3.7.min.js: 7 vulnerabilities (highest severity is: 9.8)
bootstrap-3.3.7.min.js: 8 vulnerabilities (highest severity is: 9.8)
Jan 16, 2025
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Vulnerabilities
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-779777-8537
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Dependency Hierarchy:
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Found in base branch: vp-rem
Vulnerability Details
Created automatically by the test suite
Publish Date: 2010-06-07
URL: CVE-779777-8537
CVSS 3 Score Details (9.8)
Base Score Metrics:
CVE-473193-551249
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Dependency Hierarchy:
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Found in base branch: vp-rem
Vulnerability Details
Created automatically by the test suite
Publish Date: 2010-06-07
URL: CVE-473193-551249
CVSS 3 Score Details (9.8)
Base Score Metrics:
CVE-2019-8331
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Dependency Hierarchy:
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Found in base branch: vp-rem
Vulnerability Details
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
Publish Date: 2019-02-20
URL: CVE-2019-8331
CVSS 3 Score Details (6.1)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2019-02-20
Fix Resolution: bootstrap - 3.4.1,4.3.1;bootstrap-sass - 3.4.1,4.3.1
CVE-2018-20677
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Dependency Hierarchy:
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Found in base branch: vp-rem
Vulnerability Details
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
Publish Date: 2019-01-09
URL: CVE-2018-20677
CVSS 3 Score Details (3.7)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20677
Release Date: 2019-01-09
Fix Resolution: Bootstrap - v3.4.0;NorDroN.AngularTemplate - 0.1.6;Dynamic.NET.Express.ProjectTemplates - 0.8.0;dotnetng.template - 1.0.0.4;ZNxtApp.Core.Module.Theme - 1.0.9-Beta;JMeter - 5.0.0
CVE-2018-20676
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Dependency Hierarchy:
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Found in base branch: vp-rem
Vulnerability Details
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
Publish Date: 2019-01-09
URL: CVE-2018-20676
CVSS 3 Score Details (3.7)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20676
Release Date: 2019-01-09
Fix Resolution: bootstrap - 3.4.0
CVE-2018-14042
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Dependency Hierarchy:
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Found in base branch: vp-rem
Vulnerability Details
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
Publish Date: 2018-07-13
URL: CVE-2018-14042
CVSS 3 Score Details (3.7)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2018-07-13
Fix Resolution: org.webjars.npm:bootstrap:4.1.2.org.webjars:bootstrap:3.4.0
CVE-2018-14040
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Dependency Hierarchy:
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Found in base branch: vp-rem
Vulnerability Details
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
Publish Date: 2018-07-13
URL: CVE-2018-14040
CVSS 3 Score Details (3.7)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2018-07-13
Fix Resolution: org.webjars.npm:bootstrap:4.1.2,org.webjars:bootstrap:3.4.0
CVE-2016-10735
Vulnerable Library - bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/user.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/user.jsp
Dependency Hierarchy:
Found in HEAD commit: c79f8c12a30b195a60149473e53dca53289d8e77
Found in base branch: vp-rem
Vulnerability Details
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
Mend Note: Converted from WS-2018-0021, on 2022-11-08.
Publish Date: 2019-01-09
URL: CVE-2016-10735
CVSS 3 Score Details (3.7)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10735
Release Date: 2019-01-09
Fix Resolution: bootstrap - 3.4.0, 4.0.0-beta.2
The text was updated successfully, but these errors were encountered: