Staging Environment: Content and features may be unstable or change without notice.
Advisory details: ruby_advisory_db / gems/bootstrap/CVE-2018-20676
Advisory ID ruby_advisory_db/gems/bootstrap/CVE-2018-20676
Aliases CVE-2018-20676
GHSA-3mgp-fx93-9xv5
Summary XSS vulnerability that affects bootstrap In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv2 4.3
cvssv3 6.1
Reference id Reference type URL
GHSA-3mgp-fx93-9xv5 https://github.com/advisories/GHSA-3mgp-fx93-9xv5
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.