PT-2024-37693 · Bootstrap+3 · Bootstrap+3
CVSS v3.1
6.4
متوسطة
| المتجه | AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Bootstrap (affected versions not specified)
Description
A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the
data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
استغلال
XSS
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Bootstrap
Debian
Linuxmint
Ubuntu