Podatność CVE-2018-14040

Podatność CVE-2018-14040

Publikacja: 2018-07-13

Opis:

	Tytuł	Autor	Data
Med.	dotCMS 5.1.1 Vulnerable Dependencies	John Martinelli	11.05.2019
Low	OctoberCMS Insecure Dependencies	SECURELI.com	15.03.2020

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Getbootstrap -> Bootstrap
Debian -> Debian linux

http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html

http://seclists.org/fulldisclosure/2019/May/10

http://seclists.org/fulldisclosure/2019/May/11

http://seclists.org/fulldisclosure/2019/May/13

https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/

https://github.com/twbs/bootstrap/issues/26423

https://github.com/twbs/bootstrap/issues/26625

https://github.com/twbs/bootstrap/pull/26630

https://lists.debian.org/debian-lts-announce/2018/08/msg00027.html

https://seclists.org/bugtraq/2019/May/18