vulnerability
Debian: CVE-2024-6485: twitter-bootstrap3 -- security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:H/Au:N/C:C/I:P/A:P) | Jul 11, 2024 | Apr 14, 2025 | Aug 15, 2025 |
Severity
7
CVSS
(AV:N/AC:H/Au:N/C:C/I:P/A:P)
Published
Jul 11, 2024
Added
Apr 14, 2025
Modified
Aug 15, 2025
Description
A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.
Solution
debian-upgrade-twitter-bootstrap3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.