Using Components(Bootstrap,.Net etc) with Known Vulnerabilities
Objective
To eliminate security risks arising from outdated third-party components.
Issue
The application is using an outdated version of Bootstrap, which contains known security vulnerabilities.
Impact
-
Exposure to known exploits
-
Increased risk of UI-based attacks (e.g., XSS)
-
Potential compromise of application security
Affected Component
Recommendation
Upgrade to AutomationEdge version 8.0.2 or above, which includes Bootstrap 5.3.3 with security fixes.
Validation
-
Verify AE application version is 8.0.2 or higher
-
Check Bootstrap version in browser (Developer Tools → Sources / Network)
Reference
-
Snyk Bootstrap Security Report
Note
-
Older versions may remain vulnerable
-
It is recommended to upgrade to the latest supported version for better security