Getbootstrap

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Getbootstrap records in CISA KEV

No Getbootstrap vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bootstrap 7 records MEDIUM Bootstrap-sass 1 record MEDIUM

Records

7 records in Bootstrap · all components

TI-2019-05979 CVE-2019-8331 · GHSA-9v3m-8fp8-mj99

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

MEDIUM 44

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.16404 Published 2019-02-20 Partial fix · 4.3.1, 3.4.1 +1 CWE-79

TI-2018-14682 CVE-2018-20677 · GHSA-ph58-4vrj-w6hr

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

LOW 34

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03984 Published 2019-01-09 Partial fix · 3.4.0 CWE-79

TI-2018-14681 CVE-2018-20676 · GHSA-3mgp-fx93-9xv5

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

LOW 34

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03835 Published 2019-01-09 Partial fix · 3.4.0 CWE-79

TI-2018-10147 CVE-2018-14042 · GHSA-7mvr-5x2g-wfc8

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

LOW 34

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.04009 Published 2018-07-13 Partial fix · 4.1.2, 3.4.0 CWE-79

TI-2018-10146 CVE-2018-14041 · GHSA-pj7m-g53m-7638

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

LOW 34

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.04312 Published 2018-07-13 Partial fix · 4.1.2, 8.7.23 +1 CWE-79

TI-2018-10145 CVE-2018-14040 · GHSA-3wqf-4x89-9g79

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

LOW 34

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.04135 Published 2018-07-13 Partial fix · 4.1.2, 3.4.0 CWE-79

TI-2016-08775 CVE-2016-10735 · GHSA-4p24-vmcr-4gqj

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the…

LOW 34

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0404 Published 2019-01-09 Partial fix · 3.4.0, 4.0.0-beta.2 CWE-79

Open these records in search →

Critical	1
High	0
Medium	7
Low	0
No CVSS	0