ADVISORIES
GEM
SEVERITY
CVSS v3.x: 6.1 (Medium)
CVSS v2.0: 4.3 (Medium)
PATCHED VERSIONS
- >= 4.0.0-beta.2
DESCRIPTION
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute.
| Get Updates: | Via Atom | On Twitter | On GitHub |
RubySec
Providing security resources for the Ruby community