CVE-2019-10215 PUBLISHED CVSS 6.099999904632568 MEDIUM

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.

EPSS 0.43% · 62.3th percentile

Risk Scores

CVSS v3.0
6.099999904632568
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.43%
62.3th percentile

Affected Products

VendorProductVersions
bootstrap-3-typeahead_projectbootstrap-3-typeahead4.0.2
Red Hatbootstrap3-typeahead.jsafter version bootstrap3-typeahead 4.0.2

Timeline

References

Open in Interactive Console →