TI-2018-14682 CVE-2018-20677 · GHSA-ph58-4vrj-w6hr
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
Priority LOW 34
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
Red Hat Decision Manager 7.6.0 Security Update
Released 2020-01-16 · Red Hat rating Moderate · View on Red Hat →
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context.