netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-9mvj-f7w8-pvh2

Browse Source
This commit is contained in:
advisory-database[bot]
2025-01-31 16:29:27 +00:00
parent 6e2c53e785
commit 0bdeb4ea17
1 changed files with 21 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json
+21 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9mvj-f7w8-pvh2",
"modified": "2024-08-16T18:14:37Z",
"modified": "2025-01-31T16:28:19Z",
"published": "2024-07-11T18:31:14Z",
"aliases": [
"CVE-2024-6484"
],
"summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
"details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an <a> tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.",
"details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the `data-slide` and `data-slide-to` attributes can be exploited through the href attribute of an `<a>` tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.",
"severity": [
{
"type": "CVSS_V3",
@@ -170,6 +170,25 @@
]
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "bootstrap-sass"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
},
{
"last_affected": "3.4.3"
}
]
}
]
}
],
"references": [