Cross Site Scripting (XSS)

🗓️ 04 Sep 2024 10:37:07Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 195 Views

Bootstrap has a Cross Site Scripting vulnerability in the carousel component's href attribute.

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities in bootstrap-3.4.1.tgz client library	11 Aug 202608:00	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities	30 Jun 202611:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 23 (4.2.0.23)	2 Sep 202512:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities bootstrap-3.4.1.tgz observed	19 Jun 202614:26	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale if the HDFS layer is enabled are now addressed in 5.2.3.4 (CVE-2025-55163, CVE-2021-4264, CVE-2025-53864, CVE-2025-48924, CVE-2024-6484, CVE-2024-13009)	20 Nov 202521:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	27 Aug 202516:52	–	ibm
CBLMariner	CVE-2024-6484 affecting package reaper for versions less than 3.1.1-19	10 Jul 202515:07	–	cbl_mariner
Chainguard	CVE-2024-6484 vulnerabilities	7 Jan 202601:30	–	cgr
Circl	CVE-2024-6484	11 Jul 202419:59	–	circl

Vulners

Node

OR

getbootstrap bootstrapRange2.3.1–3.4.1js

getbootstrap bootstrapRange3.1.1–3.4.1js

getbootstrap bootstrap-sassRange2.0.0–3.4.1js

bootstrap twbs/bootstrapRangev2.2.2–2.2.2js

bootstrap.sass bootstrap.sassMatch3.4.1js

getbootstrap bootstrapRange1.3.0–3.4.1js

getbootstrap bootstrapRange3.1.1–3.4.1js

getbootstrap bootstrapRange2.3.0–3.4.1js

bootstrap twitter/bootstrapRangev2.0.0–2.0.0js

Source	Link
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap-sass/CVE-2024-6484.yml
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2024-6484.yml
herodevs	www.herodevs.com/vulnerability-directory/cve-2024-6484
herodevs	www.herodevs.com/vulnerability-directory/cve-2024-6484

01 Aug 2025 19:32Current

6.7Medium risk

Vulners AI Score6.7

bootstrap cross site scripting carousel component href attribute arbitrary javascript