CVE:CVE-2018-14040
CNNVD:CNNVD-201807-1190
Bootstrap是一款使用HTML、CSS和JavaScript开发的开源Web前端框架。
Bootstrap 中存在跨站脚本漏洞。该漏洞源于折叠数据父属性对用户提供的输入的不正确验证。
solution:Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade getbootstrap bootstrap to a higher version than 3.4.0,4.1.2,4.0.0:alpha,4.0.0:alpha2,4.0.0:alpha3,4.0.0:alpha4,4.0.0:alpha5,4.0.0:alpha6,4.0.0:beta,4.0.0:beta2,4.0.0:beta3,and avoid the version (,3.4.0),[4.0.0,4.1.2),4.0.0:alpha,4.0.0:alpha2,4.0.0:alpha3,4.0.0:alpha4,4.0.0:alpha5,4.0.0:alpha6,4.0.0:beta,4.0.0:beta2,4.0.0:beta3