Impact Area
Security
Severity
High
Affected Element
ServiceNow
UI Script
Salesforce
Static Resource
Rule number
SN-JSL-BOOTSTRAP-BETWEEN-V400-V431(for ServiceNow)
SF-JSL-BOOTSTRAP-BETWEEN-V400-V431(for Salesforce)
Impact #
The data-template, data-content and data-title attributes are vulnerable to Cross-Site Scripting attacks in versions between 4.0.0 and 4.3.1.
Remediation #
Update bootstrap to the latest version.
Time to fix #
30 min
References #
This rule is linked to Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’).
