Skip to content
Fencer Vulns
medium 6.1

CVE-2018-14041 json

Bootstrap Cross-site Scripting vulnerability

published 2018-07-13 8 y ago modified 2026-06-17 4 mo ago also GHSA-pj7m-g53m-7638 , EUVD-2018-0462

cvss
6.1
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
4.3%
EPSS 4.3% chance of exploitation in 30 days, percentile 91%
public exploits
0
none known

Summary

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

Patch / fix

  • npm bootstrap 4.1.2
  • packagist typo3/cms-core 8.7.23, 9.5.4
  • packagist typo3/cms 8.7.23, 9.5.4
  • rubygems bootstrap 4.1.2
  • packagist twbs/bootstrap 4.1.2
  • nuget bootstrap 4.1.2
  • nuget bootstrap.sass 4.1.2
  • maven org.webjars:bootstrap 4.1.2
  • getbootstrap bootstrap 4.1.2
  • eap7-wildfly jboss enterprise application platform 7.4 7.4.9-4.GA_redhat_00003.1.el8eap
  • eap7-jettison jboss enterprise application platform 7.4 1.5.2-1.redhat_00002.1.el8eap
  • eap7-undertow jboss enterprise application platform 7.4 2.2.22-1.SP3_redhat_00001.1.el8eap
  • eap7-apache-sshd jboss enterprise application platform 7.4 2.9.2-1.redhat_00001.1.el8eap
  • eap7-elytron-web jboss enterprise application platform 7.4 1.9.3-1.Final_redhat_00001.1.el8eap
  • eap7-hal-console jboss enterprise application platform 7.4 3.3.16-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar jboss enterprise application platform 7.4 1.5.10-1.Final_redhat_00001.1.el8eap
  • eap7-jackson-core jboss enterprise application platform 7.4 2.12.7-1.redhat_00003.1.el8eap

red hat advisories RHSA-2023:0553RHSA-2023:0552RHSA-2023:0554RHSA-2023:5693

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2018-14041 updated cvss 6.1

bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy

  • Red Hat Ceph Storage 4 ceph, librbd1, librgw2, rbd-nbd, ceph-mds, ceph-mgr, +27 more
    affected: no fix planned “Out of support scope”
  • Red Hat Ceph Storage 5 ceph, cephadm, librbd1, librgw2, rbd-nbd, ceph-mds, +33 more
    affected: no fix available
  • Red Hat Fuse 7 bootstrap Red Hat JBoss Data Grid 7 bootstrap Red Hat JBoss Enterprise Application Platform 6 keycloak-adapter-sso7_2-eap6 keycloak-adapter-sso7_2-eap6 Red Hat OpenShift Container Platform 3.11 openshift3/ose-console Red Hat Openshift Container Storage 4 ceph
    affected: no fix planned “Out of support scope”
  • Red Hat Quay 3 quay/quay-rhel8
    affected: no fix available
  • Red Hat Virtualization 4 cockpit-ovirt-uiplugin, cockpit-ovirt-dashboard
    affected: no fix planned “Will not fix”
  • Red Hat Enterprise Linux 8 cockpit, cockpit-ws, 389-ds-base, cockpit-pcp, cockpit-389-ds, cockpit-bridge, +11 more Red Hat Enterprise Linux 9 cockpit-composer Red Hat Satellite 6 nodejs-patternfly-react-catalog-view-extension
    under investigation
  • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-hal-console 3.3.16-1.Final_redhat_00001.1.el7eap
    fixed: vendor fix RHSA-2023:0552
  • Red Hat JBoss EAP 7.4 for RHEL 8 eap7-hal-console 3.3.16-1.Final_redhat_00001.1.el8eap
    fixed: vendor fix RHSA-2023:0553
show 4 more
  • Red Hat JBoss EAP 7.4 for RHEL 9 eap7-hal-console 3.3.16-1.Final_redhat_00001.1.el9eap
    fixed: vendor fix RHSA-2023:0554
  • Red Hat JBoss Enterprise Application Platform 7.4.9 hal-console 3.3.16.Final-redhat-00001
    fixed: vendor fix RHSA-2023:0556
  • Red Hat Single Sign-On 7.3.2 zip
    fixed: vendor fix RHSA-2019:1456
  • Red Hat CloudForms Management Engine 5 cfme-gemset Red Hat OpenShift Service Mesh 2.1 servicemesh-prometheus Red Hat Decision Manager 7 bootstrap Red Hat Discovery 1 discovery-server-container Red Hat Enterprise Linux 7 ipa, pki-ca, pki-kra, pki-base, pki-core, pki-tools, +17 more Red Hat Enterprise Linux 8 ipa, jss, pki-ca, idm-jss, ldapjdk, pki-kra, +41 more
    +17 more products
    Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) python-XStatic-Bootstrap-SCSS Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-jettison 1.5.2-1.redhat_00002.1.el7eap, eap7-wildfly 7.4.9-4.GA_redhat_00003.1.el7eap, eap7-apache-sshd 2.9.2-1.redhat_00001.1.el7eap, eap7-jackson-core 2.12.7-1.redhat_00003.1.el7eap, eap7-undertow 2.2.22-1.SP3_redhat_00001.1.el7eap, eap7-woodstox-core 6.4.0-1.redhat_00001.1.el7eap, +42 more Red Hat JBoss EAP 7.4 for RHEL 8 eap7-jettison 1.5.2-1.redhat_00002.1.el8eap, eap7-wildfly 7.4.9-4.GA_redhat_00003.1.el8eap, eap7-apache-sshd 2.9.2-1.redhat_00001.1.el8eap, eap7-jackson-core 2.12.7-1.redhat_00003.1.el8eap, eap7-undertow 2.2.22-1.SP3_redhat_00001.1.el8eap, eap7-woodstox-core 6.4.0-1.redhat_00001.1.el8eap, +40 more Red Hat JBoss EAP 7.4 for RHEL 9 eap7-jettison 1.5.2-1.redhat_00002.1.el9eap, eap7-wildfly 7.4.9-4.GA_redhat_00003.1.el9eap, eap7-apache-sshd 2.9.2-1.redhat_00001.1.el9eap, eap7-jackson-core 2.12.7-1.redhat_00003.1.el9eap, eap7-undertow 2.2.22-1.SP3_redhat_00001.1.el9eap, eap7-woodstox-core 6.4.0-1.redhat_00001.1.el9eap, +40 more Red Hat JBoss Enterprise Application Platform 7.4.9 pom.xml, c3 0.6.0, c3 0.7.1, d3 5.9.2, fs 2.1.2, ip 2.0.0, +1536 more Red Hat JBoss Enterprise Application Platform Expansion Pack bootstrap Red Hat OpenShift Container Platform 4 openshift4/ose-console Red Hat Openshift Data Foundation 4 ceph Red Hat OpenStack Platform 8 (Liberty) python-XStatic-Bootstrap-SCSS Red Hat OpenStack Platform 9 (Mitaka) python-XStatic-Bootstrap-SCSS Red Hat OpenStack Platform 10 (Newton) python-XStatic-Bootstrap-SCSS Red Hat OpenStack Platform 11 (Ocata) python-XStatic-Bootstrap-SCSS Red Hat OpenStack Platform 12 (Pike) python-XStatic-Bootstrap-SCSS, xstatic-bootstrap-scss-common Red Hat OpenStack Platform 13 (Queens) python-XStatic-Bootstrap-SCSS, xstatic-bootstrap-scss-common Red Hat OpenStack Platform 14 (Rocky) python-XStatic-Bootstrap-SCSS, xstatic-bootstrap-scss-common Red Hat OpenStack Platform 16.1 qpid-dispatch-tools, qpid-dispatch-router Red Hat OpenStack Platform 16.2 qpid-dispatch-tools, qpid-dispatch-router
    not affected: vulnerable code not present

3 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

4.31% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/twbs/bootstrap/issues/26627 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 3.0 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N
GitHub 3.0 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected packages

ecosystem package affected fixed in
npm bootstrap
>=4.0.0, <4.1.2
4.1.2
packagist typo3/cms-core
>=8.0.0, <8.7.23
>=9.0.0, <9.5.4
8.7.23
9.5.4
packagist typo3/cms
>=8.0.0, <8.7.23
>=9.0.0, <9.5.4
8.7.23
9.5.4
rubygems bootstrap
>=4.0.0, <4.1.2
4.1.2
packagist twbs/bootstrap
>=4.0.0, <4.1.2
4.1.2
nuget bootstrap
>=4.0.0, <4.1.2
4.1.2
nuget bootstrap.sass
>=4.0.0, <4.1.2
4.1.2
maven org.webjars:bootstrap
>=4.0.0, <4.1.2
4.1.2

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.