DemoBook a demo

Vulnerability advisory

CVE-2019-8331

Published Updated OSV record ↗

Also known as GHSA-9v3m-8fp8-mj99

Severity
  • CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected versions

Repository

Affected commitsFixed by commit
GIT github.com/twbs/bootstrap ↗
All commits before 68b0d231a13201eb14acd3dc84e51543d16e5f7e68b0d231a13201eb14acd3dc84e51543d16e5f7e
1ded0d6a4eefb7daca62c44e4e735aec200f0b6f to before 8fa0d3010112dca5dd6dd501173415856001ba8b8fa0d3010112dca5dd6dd501173415856001ba8b
Also listed as affected (25)
  • v4.3.0
  • v3.4.0
  • v3.3.7
  • v3.3.6
  • v3.3.5
  • v3.3.4
  • v3.3.2
  • v3.3.1
  • v3.3.0
  • v3.2.0
  • v3.0.3
  • v3.0.1
  • v3.0.2
  • v3.0.0-rc1
  • v2.1.0
  • v2.0.4
  • v2.0.3
  • v2.0.2
  • v2.0.1
  • v2.0.0
  • v1.4.0
  • v1.3.0
  • v1.2.0
  • v1.1.0
  • v1.0.0

Description

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.