{"action":"Upgrade twitter-bootstrap-rails to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"twitter-bootstrap-rails","cve_ids":["CVE-2014-4920"],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-vpqv-mqvc-pcx2","id":"tcs_01M5KENM4D62R8CPM52JZF2D7M","modified_at":"2024-11-30T05:34:35.938132Z","published_at":"2023-03-16T18:35:11Z","references":["https://osv.dev/vulnerability/GHSA-vpqv-mqvc-pcx2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/twitter-bootstrap-rails/CVE-2014-4920.yml","https://nvisium.com/blog/2014/03/28/reflected-xss-vulnerability-in-twitter"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vpqv-mqvc-pcx2","url":"https://osv.dev/vulnerability/GHSA-vpqv-mqvc-pcx2"}],"summary":"Reflective Cross-site Scripting Vulnerability in twitter-bootstrap-rails"}