Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-1647 · ADVISORY
• twbs/bootstrap · PACKAGE
• lists.debian.org/debian-lts-announce/2025/06/msg00001.html · WEB
• lists.debian.org/debian-lts-announce/2026/10/msg00023.html · WEB
• herodevs.com/vulnerability-directory/cve-2025-1647 · WEB

bootstrap のその他の脆弱性

• CVE-2024-6485中 6.4A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associa…
• CVE-2019-8331中 6.1In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
• CVE-2018-20677中 6.1In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
• CVE-2018-20676中 6.1In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
• CVE-2016-10735中 6.1In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than…