Shopping Cart

No products in the cart.

Quality Clouds Community
Quality Clouds Community
View Categories

Bootstrap – XSS Vulnerability On Versions Between 4.0.0 And 4.3.1, On data-template, data-content And data-title Attributes

Table of Contents
Impact Area

Security

 

 

 

Severity

High

 

 

 

Affected Element

ServiceNow

UI Script

Salesforce

Static Resource

Rule number

SN-JSL-BOOTSTRAP-BETWEEN-V400-V431(for ServiceNow)

SF-JSL-BOOTSTRAP-BETWEEN-V400-V431(for Salesforce)

Impact #

The data-template, data-content and data-title attributes are vulnerable to Cross-Site Scripting attacks in versions between 4.0.0 and 4.3.1.

Remediation #

Update bootstrap to the latest version.

Time to fix

30 min

References #

This rule is linked to Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’).

What are your Feelings

Powered by BetterDocs

Report

Harassment or bullying behavior
Contains mature or sensitive content
Contains misleading or false information
Contains abusive or derogatory content
Contains spam, fake content or potential malware

Block Member?

Please confirm you want to block this member.

You will no longer be able to:

  • See blocked member's posts
  • Mention this member in posts
  • Invite this member to groups

Please allow a few minutes for this process to complete.

Report

You have already reported this .