Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
  • Loading branch information
hdtmccallie committed Nov 18, 2024
1 parent b2b3a7f commit bbabe11
Showing 1 changed file with 20 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@
"aliases": [
"CVE-2024-6485"
],
"summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes",
"details": "A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.",
"severity": [
{
Expand All @@ -14,7 +15,25 @@
}
],
"affected": [

{
"package": {
"ecosystem": "npm",
"name": "bootstrap"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "1.4.0"
},
{
"last_affected": "3.4.1"
}
]
}
]
}
],
"references": [
{
Expand Down

0 comments on commit bbabe11

Please sign in to comment.