XSS possible in collapse data-parent attribute #26625
Comments
|
Bug reports must include a live demo of the problem. Per our contributing guidelines, please create a reduced test case via CodePen or JS Bin and report back with your link, Bootstrap version, and specific browser and OS details. |
|
https://jsbin.com/xeminoniku/edit?html,output Browser: Chrome Version 66.0.3359.181 64x |
* fix(collapse): xss CVE-2018-14040 Fixes #26625 * fix(tooltip): xss CVE-2018-14042 Fixes #26628 * fix(tooltip): XSS on data-viewport attribute Fixes #27044 * fix(affix): XSS on target config Fixes #27045
|
during some tests in the Debian LTS security team, it was determined that Bootstrap 2.0.2 is not affected by this issue. |
|
Hi @anarcat, I don't know how the Debian LTS Team tested this issue, but I have an JSBin https://jsbin.com/xixaqeyofi/edit?html,output using bootstrap 2.3.0 which is affected by this CVE. I could track down the issue to line 34 of bootstrap-collapse using my example, see https://github.com/twbs/bootstrap/blob/v2.3.0/js/bootstrap-collapse.js#L34. This code behaves the same as https://github.com/twbs/bootstrap/blob/v2.0.0/js/bootstrap-collapse.js#L29. |
XSS possible in collapse data-parent attribute
data-parent="<img src=1 onerror=alert(123) />"Bootstrap 4.1.1 in combination with JQuery 3.3.1
The text was updated successfully, but these errors were encountered: