Skip to main content

Bootstrap Sass

1 CVEs product

Monthly

CVE-2019-10842 Ruby CRITICAL POC PATCH Act Now

Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection RCE Bootstrap Sass
NVD GitHub
CVSS 3.0
9.8
EPSS
4.9%
EPSS 5% CVSS 9.8
CRITICAL POC PATCH Act Now

Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection RCE Bootstrap Sass
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy