Search CVE reports
1 result
CVE-2019-10842
Medium priorityArbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed...
3 affected packages
compass-bootstrap-sass-plugin, node-bootstrap-sass, ruby-bootstrap-sass
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
compass-bootstrap-sass-plugin | — | — | — | Not in release | Not in release |
node-bootstrap-sass | — | — | — | Not affected | Not in release |
ruby-bootstrap-sass | — | — | — | Not affected | Not affected |