Lucene search
Redhat.comRH:CVE-2018-20676HistoryApr 04, 2020 - 5:27 p.m.
CVE-2018-20676
2020-04-0417:27:53
redhat.com
access.redhat.com
33
0.003 Low
EPSS
Percentile
70.0%
A flaw was found in Bootstrap, where it is vulnerable to Cross-site scripting, caused by improper validation of user-supplied input by the tooltip data-viewport attribute. This flaw allows a remote attacker to execute a script in a victim’s Web browser within the security context of the hosting Web site, which can lead to stealing the victim’s cookie-based authentication credentials.
Related
nvd
nvd
CVE-2018-20676
2019-01-09 05:29:01
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross Site Scripting') in Bootstrap (CVE-2018-20676)
2024-01-26 22:16:04
prion
prion
Design/Logic Flaw
2019-01-09 05:29:00
github
github
XSS vulnerability that affects bootstrap
2019-01-17 13:57:34
veracode
veracode
Cross-Site Scripting (XSS)
2019-01-10 01:52:43
cvelist
cvelist
CVE-2018-20676
2019-01-09 05:00:00
cve
cve
CVE-2018-20676
2019-01-09 05:29:01
osv
osv
CVE-2018-20676
2019-01-09 05:29:01
XSS vulnerability that affects bootstrap
2019-01-17 13:57:34
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-03 12:25:36
debiancve
debiancve
CVE-2018-20676
2019-01-09 05:29:01
ubuntucve
ubuntucve
CVE-2018-20676
2019-01-09 00:00:00
gitlab
gitlab
redhat
redhat
(RHSA-2020:0133) Moderate: Red Hat Decision Manager 7.6.0 Security Update
2020-01-16 16:00:35
(RHSA-2020:0132) Moderate: Red Hat Process Automation Manager 7.6.0 Security Update
2020-01-16 16:00:13
(RHSA-2020:5571) Moderate: python-XStatic-Bootstrap-SCSS security update
2020-12-16 12:54:58
nessus
nessus
RHEL 7 : Virtualization Manager (RHSA-2019:3023)
2019-10-15 00:00:00
RHEL 7 : python-XStatic-Bootstrap-SCSS (RHSA-2020:5571)
2020-12-18 00:00:00
RHEL 9 : Red Hat Ceph Storage 6.1 (RHSA-2023:5693)
2023-10-12 00:00:00
ics
ics
Mitsubishi Electric EcoWebServerIII
2022-02-24 12:00:00
centos
centos
ipa, python2 security update
2020-10-20 18:15:27
almalinux
almalinux
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-03 12:25:36
amazon
amazon
Medium: ipa
2020-10-22 17:40:00
rocky
rocky
idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-03 12:25:36
oraclelinux
oraclelinux
ipa security, bug fix, and enhancement update
2020-10-06 00:00:00
idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-10 00:00:00