Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2018-20677

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 09 янв. 2019
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: ubuntu
ΠŸΡ€ΠΈΠΎΡ€ΠΈΡ‚Π΅Ρ‚: low
EPSS Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
CVSS2: 4.3
CVSS3: 6.1

ОписаниС

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

DNE

disco

ignored

end of life
eoan

DNE

esm-apps/bionic

needs-triage

esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
esm-infra/focal

DNE

focal

DNE

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

3.4.0+dfsg-1
disco

not-affected

3.4.0+dfsg-1
eoan

not-affected

3.4.0+dfsg-1
esm-apps/bionic

needed

esm-apps/focal

not-affected

3.4.0+dfsg-1
esm-apps/jammy

not-affected

3.4.0+dfsg-1
esm-apps/noble

not-affected

3.4.0+dfsg-1
esm-apps/xenial

needed

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
bionic

DNE

cosmic

DNE

devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needs-triage

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 94%
0.11866
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ

4.3 Medium

CVSS2

6.1 Medium

CVSS3

БвязанныС уязвимости

CVSS3: 6.1
redhat
большС 7 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

CVSS3: 6.1
nvd
ΠΎΠΊΠΎΠ»ΠΎ 7 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

CVSS3: 6.1
debian
ΠΎΠΊΠΎΠ»ΠΎ 7 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

In Bootstrap before 3.4.0, XSS is possible in the affix configuration ...

CVSS3: 6.1
github
ΠΎΠΊΠΎΠ»ΠΎ 7 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

bootstrap Cross-site Scripting vulnerability

CVSS3: 6.1
fstec
ΠΎΠΊΠΎΠ»ΠΎ 7 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ ΠΏΠ»Π°Π³ΠΈΠ½Π° affix Π½Π°Π±ΠΎΡ€Π° инструмСнтов для создания сайтов ΠΈ Π²Π΅Π±-ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ Bootstrap, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡŽΡ‰Π°Ρ Π½Π°Ρ€ΡƒΡˆΠΈΡ‚Π΅Π»ΡŽ ΠΎΡΡƒΡ‰Π΅ΡΡ‚Π²Π»ΡΡ‚ΡŒ мСТсайтовыС сцСнарныС Π°Ρ‚Π°ΠΊΠΈ

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 94%
0.11866
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ CVE-2018-20677