Using Components(Bootstrap,.Net etc) with Known Vulnerabilities

Using Components(Bootstrap,.Net etc) with Known Vulnerabilities


Objective

To eliminate security risks arising from outdated third-party components.


Issue

The application is using an outdated version of Bootstrap, which contains known security vulnerabilities.


Impact

  • Exposure to known exploits
  • Increased risk of UI-based attacks (e.g., XSS)
  • Potential compromise of application security

Affected Component

  • Bootstrap (UI Framework)

Recommendation

Upgrade to AutomationEdge version 8.0.2 or above, which includes Bootstrap 5.3.3 with security fixes.


Validation

  • Verify AE application version is 8.0.2 or higher
  • Check Bootstrap version in browser (Developer Tools → Sources / Network)

Reference

  • Snyk Bootstrap Security Report

Note

  • Older versions may remain vulnerable
  • It is recommended to upgrade to the latest supported version for better security

      Links to better reach 

            Bot Store

             EPD