Podatność CVE-2018-14041

Podatność CVE-2018-14041

Publikacja: 2018-07-13

Opis:

	Tytuł	Autor	Data
Med.	dotCMS 5.1.1 Vulnerable Dependencies	John Martinelli	11.05.2019
Low	OctoberCMS Insecure Dependencies	SECURELI.com	15.03.2020

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Getbootstrap -> Bootstrap

http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html

http://seclists.org/fulldisclosure/2019/May/10

http://seclists.org/fulldisclosure/2019/May/11

http://seclists.org/fulldisclosure/2019/May/13

https://access.redhat.com/errata/RHSA-2019:1456

https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/

https://github.com/twbs/bootstrap/issues/26423

https://github.com/twbs/bootstrap/issues/26627

https://github.com/twbs/bootstrap/pull/26630

https://seclists.org/bugtraq/2019/May/18