diff --git a/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json b/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json index 5b5c891cda2..8c9c7e6cf67 100644 --- a/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json +++ b/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-9mvj-f7w8-pvh2", - "modified": "2024-08-16T18:14:37Z", + "modified": "2025-01-31T16:28:19Z", "published": "2024-07-11T18:31:14Z", "aliases": [ "CVE-2024-6484" ], "summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability", - "details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.", + "details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the `data-slide` and `data-slide-to` attributes can be exploited through the href attribute of an `` tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.", "severity": [ { "type": "CVSS_V3", @@ -170,6 +170,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "npm", + "name": "bootstrap-sass" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.0.0" + }, + { + "last_affected": "3.4.3" + } + ] + } + ] } ], "references": [