Name: CVE-2018-14041: Improper Neutralization of Input During Web Page Generation
Creator: Rapid7
Published: 2018-07-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-14041, CWE-79, CVSS 6.1, EPSS 0.07723

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

CVSS Details

CVSS 3.1 Base Score: 6.1
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade libcephfs-develUpgrade libcephfs2-debuginfoUpgrade librgw-develUpgrade librados-develUpgrade python3-cephfs-debuginfoUpgrade python3-ceph-argparseUpgrade python3-rados-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-radosUpgrade python3-ceph-commonUpgrade rbd-nbd-debuginfoUpgrade ceph-commonUpgrade python3-rgwUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs2Upgrade rbd-mirror-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-debugsourceUpgrade ceph-debuginfoUpgrade cephfs-topUpgrade python3-rbdUpgrade ceph-mds-debuginfoUpgrade ceph-immutable-object-cacheUpgrade python3-cephfsUpgrade ceph-osd-debuginfoUpgrade ceph-common-debuginfoUpgrade librgw2Upgrade ceph-fuseUpgrade libcephsqlite-debuginfoUpgrade ceph-exporter-debuginfoUpgrade libradosstriper1-debuginfoUpgrade python3-rbd-debuginfoUpgrade librbd-develUpgrade ceph-mon-debuginfoUpgrade ceph-baseUpgrade ceph-mibUpgrade ceph-base-debuginfoUpgrade librgw2-debuginfoUpgrade cephadm-ansibleUpgrade python3-rgw-debuginfoUpgrade libradospp-develUpgrade ceph-fuse-debuginfoUpgrade rbd-nbdUpgrade libradosstriper1Upgrade ceph-test-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-selinuxUpgrade ceph-mgr-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade cephadmUpgrade cephfs-mirror-debuginfo	Nov 1, 2023	Jul 13, 2018
F5 Big Ip	—	Update F5 BIG-IP to the latest version	Jun 17, 2026	Nov 19, 2021
Red Hat Jboss Eap	—	Upgrade Red Hat JBoss EAP to the latest version	Sep 19, 2024	May 29, 2018
Red_hat Jboss_eap	—	—	Apr 10, 2023	Jul 13, 2018
Redhat_linux	—	Upgrade librgw2Upgrade libcephsqlite-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-mibUpgrade rbd-nbdUpgrade libradosstriper1Upgrade ceph-immutable-object-cacheUpgrade ceph-test-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-fuseUpgrade ceph-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-selinuxUpgrade ceph-base-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-mgr-debuginfoUpgrade cephfs-topUpgrade libradospp-develUpgrade python3-cephfsUpgrade ceph-exporter-debuginfoUpgrade ceph-fuse-debuginfoUpgrade python3-rbdUpgrade libradosstriper1-debuginfoUpgrade python3-rados-debuginfoUpgrade ceph-baseUpgrade cephadm-ansibleUpgrade python3-ceph-commonUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-radosUpgrade librbd-develUpgrade librgw-develUpgrade cephfs-mirror-debuginfoUpgrade python3-rbd-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-rgwUpgrade libcephfs-develUpgrade libcephfs2-debuginfoUpgrade cephadmUpgrade librados-develUpgrade ceph-radosgw-debuginfoUpgrade librados-devel-debuginfoUpgrade libcephfs2Upgrade ceph-debugsourceUpgrade ceph-commonUpgrade rbd-fuse-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-cephfs-debuginfo	Nov 1, 2023	Jul 13, 2018

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence