CVE-2018-14040

6.1MEDIUM

Key Information

Vendor: Debian
Status: Debian Linux
Vendor: CVE Published:; 13 July 2018

Badges

👾 Exploit Exists🔴 Public PoC

Summary

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

https-nj.gov---CVE-2018-14040
Created by Snorlyd

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

👾
Exploit exists.
Aug 6, 2024
Vulnerability published.
Jul 13, 2018
Vulnerability Reserved.
Jul 13, 2018

Collectors

NVD DatabaseMitre Database1 Proof of Concept(s)