Closed mend-local-app[bot] closed 6 months ago
bootstrap-3.3.5.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.5/js/bootstrap.min.js
Path to vulnerable library: /src/main/webapp/resources/js/bootstrap.min.js
Dependency Hierarchy: - :x: **bootstrap-3.3.5.min.js** (Vulnerable Library)
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/upload.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/upload.jsp
Dependency Hierarchy: - :x: **bootstrap-3.3.7.min.js** (Vulnerable Library)
Found in HEAD commit: 9c6901108cf0138889fa46846fabfcb78828d070
Found in base branch: vp-rem
XSS in data-target in bootstrap (3.3.7 and before)
Publish Date: 2017-09-29
URL: WS-2018-0021
Base Score Metrics not available
Type: Upgrade version
Release Date: 2019-06-12
Fix Resolution: 3.4.0
:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
WS-2018-0021 - Medium Severity Vulnerability
bootstrap-3.3.5.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.5/js/bootstrap.min.js
Path to vulnerable library: /src/main/webapp/resources/js/bootstrap.min.js
Dependency Hierarchy: - :x: **bootstrap-3.3.5.min.js** (Vulnerable Library)
bootstrap-3.3.7.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Path to dependency file: /src/main/webapp/WEB-INF/views/upload.jsp
Path to vulnerable library: /src/main/webapp/WEB-INF/views/upload.jsp
Dependency Hierarchy: - :x: **bootstrap-3.3.7.min.js** (Vulnerable Library)
Found in HEAD commit: 9c6901108cf0138889fa46846fabfcb78828d070
Found in base branch: vp-rem
XSS in data-target in bootstrap (3.3.7 and before)
Publish Date: 2017-09-29
URL: WS-2018-0021
Base Score Metrics not available
Type: Upgrade version
Release Date: 2019-06-12
Fix Resolution: 3.4.0