Staging Environment: Content and features may be unstable or change without notice.
Advisory details: ruby_advisory_db / gems/bootstrap/CVE-2018-20677
Advisory ID ruby_advisory_db/gems/bootstrap/CVE-2018-20677
Aliases CVE-2018-20677
GHSA-ph58-4vrj-w6hr
Summary bootstrap Cross-site Scripting vulnerability In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv2 4.3
cvssv3 6.1
Reference id Reference type URL
GHSA-ph58-4vrj-w6hr https://github.com/advisories/GHSA-ph58-4vrj-w6hr
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.