diff --git a/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json b/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json
index 5b5c891cda2..8c9c7e6cf67 100644
--- a/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json
+++ b/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9mvj-f7w8-pvh2",
- "modified": "2024-08-16T18:14:37Z",
+ "modified": "2025-01-31T16:28:19Z",
"published": "2024-07-11T18:31:14Z",
"aliases": [
"CVE-2024-6484"
],
"summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
- "details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.",
+ "details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the `data-slide` and `data-slide-to` attributes can be exploited through the href attribute of an `` tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.",
"severity": [
{
"type": "CVSS_V3",
@@ -170,6 +170,25 @@
]
}
]
+ },
+ {
+ "package": {
+ "ecosystem": "npm",
+ "name": "bootstrap-sass"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "2.0.0"
+ },
+ {
+ "last_affected": "3.4.3"
+ }
+ ]
+ }
+ ]
}
],
"references": [