search

amaybaum-local / remediate-test6

0 stars 1 forks source link

WS-2018-0021 (Medium) detected in bootstrap-3.3.5.min.js, bootstrap-3.3.7.min.js - autoclosed #63

Closed mend-local-app[bot] closed 6 months ago

mend-local-app[bot] commented 6 months ago

WS-2018-0021 - Medium Severity Vulnerability

Vulnerable Libraries - bootstrap-3.3.5.min.js, bootstrap-3.3.7.min.js

bootstrap-3.3.5.min.js

The most popular front-end framework for developing responsive, mobile first projects on the web.

Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.5/js/bootstrap.min.js

Path to vulnerable library: /src/main/webapp/resources/js/bootstrap.min.js

Dependency Hierarchy: - :x: **bootstrap-3.3.5.min.js** (Vulnerable Library)

bootstrap-3.3.7.min.js

The most popular front-end framework for developing responsive, mobile first projects on the web.

Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js

Path to dependency file: /src/main/webapp/WEB-INF/views/upload.jsp

Path to vulnerable library: /src/main/webapp/WEB-INF/views/upload.jsp

Dependency Hierarchy: - :x: **bootstrap-3.3.7.min.js** (Vulnerable Library)

Found in HEAD commit: 9c6901108cf0138889fa46846fabfcb78828d070

Found in base branch: vp-rem

Vulnerability Details

XSS in data-target in bootstrap (3.3.7 and before)

Publish Date: 2017-09-29

URL: WS-2018-0021

CVSS 2 Score Details (6.5)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Release Date: 2019-06-12

Fix Resolution: 3.4.0

mend-local-app[bot] commented 6 months ago

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.