未評価
Provides the Bootstrap front-end framework as a Drupal theme. Bootstrap theme did not sufficiently filter certain attributes, which could lead to a c...
CVE-2026-114538
SecPulse初出
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/bootstrap |
3.45.0 未満 |
3.45.0 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Provides the Bootstrap front-end framework as a Drupal theme.
Bootstrap theme did not sufficiently filter certain attributes, which could lead to a cross-site scripting vulnerability.
This vulnerability is mitigated by only affecting the optional tooltip and popover features. A short-term mitigation is to disable tooltips and popovers on admin/appearance/settings/bootstrap or admin/appearance/settings/my_bootstrap_subtheme.
参照URL
- web drupal.org