Contents

---
gem: bootstrap-sass
cve: 2016-10735
url: https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/
title: XSS vulnerability via data-target in bootstrap-sass
date: 2016-07-27

description: |
  In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2,
  XSS is possible in the data-target attribute.

cvss_v2: 4.3
cvss_v3: 6.1

patched_versions:
  - '>= 3.4.0'

related:
  url:
    - https://github.com/twbs/bootstrap/issues/20184

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/bootstrap-sass/CVE-2016-10735.yml