Bootstrap: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Summary

Product

Vulnerabilities 3

• Medium 6.4
  CVE-2024-6485 Public exploit

  XSS in Bootstrap button component

  A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting mal…

  Bootstrap Bootstrap-sass Bootstrap bootstrap-sass Debian Ubuntu Azure Linux Wolfi npm
  Jul 11, 2024
• Unscored —
  CVE-2024-6484 Rejected

  This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally …

  jupyter-base-notebook rancher-api-ui twitter-bootstrap3 Ubuntu Wolfi
  Jul 11, 2024
• Unscored —
  CVE-2024-6531 Rejected

  This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally …

  twitter-bootstrap4 Ubuntu
  Jul 11, 2024

Revision history

1. 2026-10-08 #10

   Neue Updates von Debian aufgenommen

2. 2025-10-23 #9

   Neue Updates von IBM aufgenommen

3. 2025-09-02 #8

   Neue Updates von IBM aufgenommen

4. 2025-05-14 #7

   Neue Updates von HITACHI aufgenommen

5. 2025-04-13 #6

   Neue Updates von Debian aufgenommen

6. 2025-03-30 #5

   Neue Updates von IBM aufgenommen

7. 2025-03-23 #4

   Neue Updates von IBM aufgenommen

8. 2025-02-10 #3

   Neue Updates von Red Hat aufgenommen

9. 2024-12-09 #2

   Neue Updates aufgenommen

10. 2024-07-11 #1

    Initiale Fassung

References

• Camunda Security Notices
  https://docs.camunda.org/security/notices/#notice-124
• herodevs vulnerability directory vom 2024-07-11
  https://www.herodevs.com/vulnerability-directory/cve-2024-6531
• herodevs vulnerability directory vom 2024-07-11
  https://www.herodevs.com/vulnerability-directory/cve-2024-6485
• herodevs vulnerability directory vom 2024-07-11
  https://www.herodevs.com/vulnerability-directory/cve-2024-6484
• Red Hat Security Advisory RHSA-2025:1249 vom 2025-02-10
  https://access.redhat.com/errata/RHSA-2025:1249
• IBM Security Bulletin 7228842 vom 2025-03-24
  https://www.ibm.com/support/pages/node/7228842
• IBM Security Bulletin 7229443 vom 2025-03-28
  https://www.ibm.com/support/pages/node/7229443
• Debian Security Advisory DLA-4124 vom 2025-04-13
  https://lists.debian.org/debian-lts-announce/2025/04/msg00020.html
• Debian Security Advisory DLA-4125 vom 2025-04-13
  https://lists.debian.org/debian-lts-announce/2025/04/msg00021.html
• Hitachi Vulnerability Information HITACHI-SEC-2025-113 vom 2025-05-15
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-113/index.html
• IBM Security Bulletin 7243781 vom 2025-09-02
  https://www.ibm.com/support/pages/node/7243781
• IBM Security Bulletin 7248973 vom 2025-10-23
  https://www.ibm.com/support/pages/node/7248973
• Debian Security Advisory DLA-1479 vom 2026-10-09
  https://security-tracker.debian.org/tracker/twitter-bootstrap3