CPE Details
Getbootstrap Bootstrap 4.0.0
4.0.0
2019-05-07
13h47 +00:00
13h47 +00:00
2019-05-07
13h47 +00:00
13h47 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:getbootstrap:bootstrap:4.0.0:-:*:*:*:*:*:*
Informations
Vendor
getbootstrapProduct
bootstrapVersion
4.0.0Update
-Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded. | ||||
| In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute. | 6.1 |
Moyen |
||
| In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy. | 6.1 |
Moyen |
||
| In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. | 6.1 |
Moyen |
