Miggo Logo
Miggo Vulnerability Database
→
CVE-2018-20676

CVE-2018-20676:
XSS vulnerability that affects bootstrap

6.1

CVSS Score
3.0

Basic Information

CVE ID
CVE-2018-20676
GHSA ID
GHSA-3mgp-fx93-9xv5
EPSS Score
0.90445%
CWE
CWE-79
Published
1/17/2019
Updated
8/5/2024
KEV Status
No
Technology
TechnologyJavaScript

Technical Details

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
bootstrapnpm< 3.4.03.4.0
bootstrap-sassnpm< 3.4.03.4.0
twbs/bootstrapcomposer< 3.4.03.4.0
org.webjars:bootstrapmaven< 3.4.03.4.0
bootstraprubygems< 3.4.03.4.0
bootstrap-sassrubygems< 3.4.03.4.0
bootstrapnuget< 3.4.03.4.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The GitHub commit 2a5ba23 shows critical changes in tooltip.js's viewport and container handling. The vulnerability manifests when user-controlled attributes (data-viewport/data-container) are passed to jQuery's DOM manipulation methods without proper context escaping. The patch introduces document.find() to enforce selector context rather than raw HTML interpretation. Unit tests added in the commit specifically validate() XSS prevention in these attributes, confirming their vulnerability surface.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

In *ootstr*p ***or* *.*.*, XSS is possi*l* in t** tooltip **t*-vi*wport *ttri*ut*.

Reasoning

T** *it*u* *ommit ******* s*ows *riti**l ***n**s in `tooltip.js`'s vi*wport *n* *ont*in*r **n*lin*. T** vuln*r**ility m*ni**sts w**n us*r-*ontroll** *ttri*ut*s (**t*-vi*wport/**t*-*ont*in*r) *r* p*ss** to `jQu*ry`'s *OM m*nipul*tion m*t*o*s wit*out p