Getbootstrap Bootstrap Sass
By the Year
In 2024 there have been 0 vulnerabilities in Getbootstrap Bootstrap Sass . Bootstrap Sass did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 1 | 9.80 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Bootstrap Sass vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Getbootstrap Bootstrap Sass Security Vulnerabilities
Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org
CVE-2019-10842
9.8 - Critical
- April 04, 2019
Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed via eval(), which can be leveraged to execute arbitrary code on the target system. Note that there are three underscore characters in the cookie name. This is unrelated to the __cfduid cookie that is legitimately used by Cloudflare.
Code Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Getbootstrap Bootstrap Sass or by Getbootstrap? Click the Watch button to subscribe.
