Описание
Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libjs-bootbox | fixed | 6.0.3~ds-1 | experimental | package |
| libjs-bootbox | unfixed | package | ||
| libjs-bootbox | postponed | trixie | package | |
| libjs-bootbox | postponed | bookworm | package | |
| libjs-bootbox | no-dsa | bullseye | package | |
| libjs-bootbox | postponed | buster | package |
Примечания
https://github.com/bootboxjs/bootbox/issues/661
EPSS
Связанные уязвимости
Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.
Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.
Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.
EPSS