PT-2024-37659

🗓️ 11 Jul 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Vulnerability in Bootstrap exposes Cross-Site Scripting risks in carousel component due to poor sanitization.

Reporter	Title	Published	Views	Family All 98
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	16 Apr 202514:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Bootstrap (CVE-2024-6531) affects Power HMC.	24 Mar 202509:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (February 2025)	15 Apr 202503:52	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Bootstrap affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	14 May 202519:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	30 Jan 202617:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Fasterxml Jackson,FasterXML Jackson Core,Bouncy Castle Java, Netty,Hibernate Validator,JCraft JSch,Apache Tomcat,Bootstrap might affect IBM Storage Defender Copy Data Management	12 Dec 202515:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to bootstrap-4.6.2 CVE-2024-6531	13 Feb 202509:35	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-Site Scripting (XSS) Vulnerability in data-target Attribute Handling in Bootstrap, affects watsonx.data	7 Apr 202611:00	–	ibm

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-7556-1
ubuntu	www.ubuntu.com/security/CVE-2024-6485
packages	www.packages.debian.org/src:twitter-bootstrap3
t	www.t.me/cvedetector/676
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-6484
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap-sass/CVE-2024-6484.yml
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
twitter	www.twitter.com/VulmonFeeds/status/1811474021088657785
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

22 Sep 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.4

EPSS0.00139

SSVC