> CVE-2024-6531

« BACK_TO_HOME
PUBLISHED
2024-07-11 18:15
MODIFIED
2025-08-01 18:15
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 GITHUB 🔗 2026-11-11 OSV 🔗 2026-11-08 MSRC 🔗 2026-08-08

> DESCRIPTION

Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-vc8w-jr9v-vj7f MODERATE

Withdrawn Advisory: Bootstrap Cross-Site Scripting (XSS) vulnerability

AFFECTED PACKAGES:
MAVEN / org.webjars.npm:bootstrap
>= 4.0.0, <= 4.6.2
Fixed in: 5.0.0
MAVEN / org.webjars:bootstrap
>= 4.0.0, <= 4.6.2
Fixed in: 5.0.0
COMPOSER / twbs/bootstrap
>= 4.0.0, <= 4.6.2
Fixed in: 5.0.0
NUGET / bootstrap.sass
>= 4.0.0, <= 4.6.2
Fixed in: 5.0.0
NUGET / bootstrap
>= 4.0.0, <= 4.6.2
Fixed in: 5.0.0
RUBYGEMS / bootstrap
>= 4.0.0, <= 4.6.2
Fixed in: 5.0.0
NPM / bootstrap
>= 4.0.0, <= 4.6.2
Fixed in: 5.0.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Debian:11 / twitter-bootstrap4
2 versions affected
Debian:12 / twitter-bootstrap4
1 versions affected
Debian:13 / twitter-bootstrap4
Unknown / Unknown
18 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
11/07/2024 18:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:52
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME