Podatność CVE-2019-8331

Podatność CVE-2019-8331

Publikacja: 2019-02-20

Opis:

	Tytuł	Autor	Data
Med.	dotCMS 5.1.1 Vulnerable Dependencies	John Martinelli	11.05.2019
Low	OctoberCMS Insecure Dependencies	SECURELI.com	15.03.2020

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Getbootstrap -> Bootstrap
F5 -> Big-ip access policy manager
F5 -> Big-ip advanced firewall manager
F5 -> Big-ip analytics
F5 -> Big-ip application acceleration manager
F5 -> Big-ip application security manager
F5 -> Big-ip domain name system
F5 -> Big-ip edge gateway
F5 -> Big-ip fraud protection service
F5 -> Big-ip global traffic manager
F5 -> Big-ip link controller
F5 -> Big-ip local traffic manager
F5 -> Big-ip policy enforcement manager
F5 -> Big-ip webaccelerator

http://seclists.org/fulldisclosure/2019/May/10

http://seclists.org/fulldisclosure/2019/May/11

http://seclists.org/fulldisclosure/2019/May/13

http://www.securityfocus.com/bid/107375

https://access.redhat.com/errata/RHSA-2019:1456

https://blog.getbootstrap.com/2019/02/13/bootstrap-4-3-1-and-3-4-1/

https://github.com/twbs/bootstrap/pull/28236

https://github.com/twbs/bootstrap/releases/tag/v3.4.1

https://github.com/twbs/bootstrap/releases/tag/v4.3.1

https://seclists.org/bugtraq/2019/May/18

https://support.f5.com/csp/article/K24383845