Search CVE reports
1 result
Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed...
3 affected packages
compass-bootstrap-sass-plugin, node-bootstrap-sass, ruby-bootstrap-sass
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
compass-bootstrap-sass-plugin | — | — | — | Not in release |
node-bootstrap-sass | — | — | — | Not affected |
ruby-bootstrap-sass | — | — | — | Not affected |