CVE-2018-14041: XSS

Published May 29, 2018
·
Updated

A flaw was found in Bootstrap from version 4.0 and before 4.1.2. A Cross-site Scripting (XSS) is possible in the data-target property of scrollspy.

References: https://github.com/twbs/bootstrap/issues/26627

Upstream Patch: https://github.com/twbs/bootstrap/pull/26630

Other sources

A flaw was found in Bootstrap, where it is vulnerable to Cross-site scripting, caused by improper validation of user-supplied input by the data-target property of scrollspy. This flaw allows a remote attacker to execute a script in a victim's Web browser within the security context of the hosting Web site, which can lead to stealing the victim's cookie-based authentication credentials.

Bootstrap is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the data-target property of scrollspy. A remote attacker could exploit this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

— IBM

Cross-Site Scripting in Bootstrap CSS toolkit

In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042.

— GitHub

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

Affected Software

28 affected componentsFixes available
composer/typo3/cms>=8.0.0, <8.7.23, >=9.0.0, <9.5.4
composer/typo3/cms-core>=8.0.0, <8.7.23, >=9.0.0, <9.5.4
redhat/eap7-hal-console<0:3.3.16-1.Final_redhat_00001.1.el8ea
0:3.3.16-1.Final_redhat_00001.1.el8ea
redhat/eap7-hal-console<0:3.3.16-1.Final_redhat_00001.1.el9ea
0:3.3.16-1.Final_redhat_00001.1.el9ea
redhat/eap7-hal-console<0:3.3.16-1.Final_redhat_00001.1.el7ea
0:3.3.16-1.Final_redhat_00001.1.el7ea
redhat/bootstrap<4.1.2
4.1.2
maven/org.webjars:bootstrap>=4.0.0<4.1.2
4.1.2
nuget/bootstrap.sass>=4.0.0<4.1.2
4.1.2
nuget/bootstrap>=4.0.0<4.1.2
4.1.2
composer/twbs/bootstrap>=4.0.0<4.1.2
4.1.2
rubygems/bootstrap>=4.0.0<4.1.2
4.1.2
composer/typo3/cms>=9.0.0<9.5.4
9.5.4
composer/typo3/cms>=8.0.0<8.7.23
8.7.23
composer/typo3/cms-core>=9.0.0<9.5.4
9.5.4
composer/typo3/cms-core>=8.0.0<8.7.23
8.7.23
npm/bootstrap>=4.0.0<4.1.2
4.1.2
IBM Cognos Analytics<=12.0.0-12.0.3
IBM Cognos Analytics<=11.2.0-11.2.4 FP4
getbootstrap Bootstrap>=4.0.0<4.1.2
getbootstrap Bootstrap=4.0.0-alpha
getbootstrap Bootstrap=4.0.0-alpha2
getbootstrap Bootstrap=4.0.0-alpha3
getbootstrap Bootstrap=4.0.0-alpha4
getbootstrap Bootstrap=4.0.0-alpha5
getbootstrap Bootstrap=4.0.0-alpha6
getbootstrap Bootstrap=4.0.0-beta
getbootstrap Bootstrap=4.0.0-beta2
getbootstrap Bootstrap=4.0.0-beta3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/eap7-hal-console to a version that resolves this vulnerability.

    Fixed in 0:3.3.16-1.Final_redhat_00001.1.el8ea
  2. Upgrade

    Upgrade redhat/eap7-hal-console to a version that resolves this vulnerability.

    Fixed in 0:3.3.16-1.Final_redhat_00001.1.el9ea
  3. Upgrade

    Upgrade redhat/eap7-hal-console to a version that resolves this vulnerability.

    Fixed in 0:3.3.16-1.Final_redhat_00001.1.el7ea
  4. Upgrade

    Upgrade maven/org.webjars:bootstrap to a version that resolves this vulnerability.

    Fixed in 4.1.2
  5. Upgrade

    Upgrade nuget/bootstrap.sass to a version that resolves this vulnerability.

    Fixed in 4.1.2
  6. Upgrade

    Upgrade nuget/bootstrap to a version that resolves this vulnerability.

    Fixed in 4.1.2
  7. Upgrade

    Upgrade composer/twbs/bootstrap to a version that resolves this vulnerability.

    Fixed in 4.1.2
  8. Upgrade

    Upgrade rubygems/bootstrap to a version that resolves this vulnerability.

    Fixed in 4.1.2
  9. Upgrade

    Upgrade composer/typo3/cms to a version that resolves this vulnerability.

    Fixed in 9.5.4
  10. Upgrade

    Upgrade composer/typo3/cms to a version that resolves this vulnerability.

    Fixed in 8.7.23
  11. Upgrade

    Upgrade composer/typo3/cms-core to a version that resolves this vulnerability.

    Fixed in 9.5.4
  12. Upgrade

    Upgrade composer/typo3/cms-core to a version that resolves this vulnerability.

    Fixed in 8.7.23
  13. Upgrade

    Upgrade npm/bootstrap to a version that resolves this vulnerability.

    Fixed in 4.1.2
  14. Upgrade

    Upgrade redhat/bootstrap to a version that resolves this vulnerability.

    Fixed in 4.1.2
  15. Upgrade

    Upgrade Bootstrap to a version that resolves this vulnerability.

    Fixed in 4.1.2
  16. Compensating control

    If you cannot immediately upgrade, mitigate the risk by preventing untrusted user input from being used in the scrollspy data-target attribute (e.g., ensure data-target values are fixed/whitelisted and not derived from attacker-controlled input).

Event History

May 29, 2018
CVE Published
12:00 AM
Jul 13, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Jul 16, 2018
Data Sourced
via Red Hat·10:50 PM
DescriptionSeverityAffected Software
Sep 13, 2018
Advisory Published
via GitHub·03:49 PM

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the vulnerability ID of this cross-site scripting vulnerability in Bootstrap CSS toolkit?

The vulnerability ID is CVE-2018-14041.

2

What is the severity of CVE-2018-14041?

The severity of CVE-2018-14041 is medium (6.1).

3

Which software versions are affected by CVE-2018-14041?

The affected software versions are TYPO3 CMS versions 8.0.0 to 8.7.23 and 9.0.0 to 9.5.4, and Red Hat EAP7 HAL Console versions 0:3.3.16-1.Final_redhat_00001.1.el8ea, 0:3.3.16-1.Final_redhat_00001.1.el9ea, and 0:3.3.16-1.Final_redhat_00001.1.el7ea.

4

How does this vulnerability in Bootstrap CSS toolkit affect the user?

This vulnerability allows a remote attacker to execute scripts in a victim's web browser within the security context of the hosting website.

5

How can I mitigate the cross-site scripting vulnerability in Bootstrap CSS toolkit?

To mitigate this vulnerability, update to TYPO3 CMS versions 8.7.24 or 9.5.5, or apply the appropriate patch provided by Red Hat for EAP7 HAL Console.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203