Contents

---
gem: bootstrap
cve: 2019-8331
url: https://blog.getbootstrap.com/2019/02/13/bootstrap-4-3-1-and-3-4-1/
title: XSS vulnerability in bootstrap
date: 2019-02-15

description: |
  In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible
  in the tooltip or popover data-template attribute.

cvss_v2: 4.3
cvss_v3: 6.1

patched_versions:
  - '>= 4.3.1'

related:
  url:
    - https://github.com/twbs/bootstrap-rubygem/releases/tag/v4.3.1

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/bootstrap/CVE-2019-8331.yml