CVE 2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
See the 
CVE page on Mitre.org
for more details.
Launchpad.net
References
- MISC: https://blog.getbootst...
- MISC: https://github.com/twb...
- MISC: https://github.com/twb...
- MISC: https://github.com/twb...
- BUGTRAQ: 20190509 dotCMS v5.1.1...
- FULLDISC: 20190510 Re: dotCMS v5...
- FULLDISC: 20190510 dotCMS v5.1.1...
- FULLDISC: 20190510 dotCMS v5.1.1...
- MLIST: [superset-dev] 2019092...
- MLIST: [drill-dev] 20191017 D...
- MLIST: [drill-dev] 20191021 [...
- MLIST: [drill-issues] 2019102...
- MISC: http://packetstormsecu...
- MLIST: [hbase-issues] 2020111...
- MLIST: [pulsar-commits] 20201...
- MISC: https://www.oracle.com...
- CONFIRM: https://www.tenable.co...
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
67d34a1
(Get the code!)