We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent a4b1ed8 commit 0af08a0Copy full SHA for 0af08a0
gems/bootstrap/CVE-2019-8331.yml
@@ -0,0 +1,20 @@
1
+---
2
+gem: bootstrap
3
+cve: 2019-8331
4
+url: https://blog.getbootstrap.com/2019/02/13/bootstrap-4-3-1-and-3-4-1/
5
+title: XSS vulnerability in bootstrap
6
+date: 2019-02-15
7
+
8
+description: |
9
+ In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible
10
+ in the tooltip or popover data-template attribute.
11
12
+cvss_v2: 4.3
13
+cvss_v3: 6.1
14
15
+patched_versions:
16
+ - '>= 4.3.1'
17
18
+related:
19
+ url:
20
+ - https://github.com/twbs/bootstrap-rubygem/releases/tag/v4.3.1
0 commit comments