RubyGems/twitter-bootstrap-rails CVE-2014-4920: medium
Reflective Cross-site Scripting Vulnerability in twitter-bootstrap-rails
Action: Upgrade twitter-bootstrap-rails to 3.2.0 or later.
bundle update twitter-bootstrap-railsAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: GHSA-vpqv-mqvc-pcx2
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/twitter-bootstrap-rails/CVE-2014-4920.yml
- https://nvisium.com/blog/2014/03/28/reflected-xss-vulnerability-in-twitter
CVE-2014-4920 · published · modified · JSON