AZL-105104

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105104.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-105104
Upstream
Published
2024-07-11T17:15:17Z
Modified
2026-10-03T05:33:30Z
Summary
CVE-2024-6485 affecting package python-openstackdocstheme 3.0.0-9
Details

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.

References

Affected packages

Azure Linux:3 / python-openstackdocstheme

Package

Name
python-openstackdocstheme
Purl
pkg:rpm/azure-linux/python-openstackdocstheme

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
3.0.0-9

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105104.json"