Skip to content
OpenAdvisories

Package · RubyGems

bootstrap-sass

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-10842

    Bootstrap-sass contains code execution backdoor

    Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed via eval(), which can be lever…

    bootstrap-sass RubyGems