pext / website

A simple website for Pext

Pext Website

A simple website for Pext.

License

CC0 1.0 (with the exception of the Pext logo, jQuery, Bootstrap and Font Awesome, which are used under their original licenses)

website's Issues

Show teams and members

This is going to need some custom code using the https://developer.github.com/v3/orgs/teams/#list-teams and https://developer.github.com/v3/orgs/teams/#list-team-members API calls. Also need to make sure private users don't show up.

This is especially useful in relation to Pext/Pext#68, so that users can easily see all members in the moderator team.

Add a (visible) link to the source code for Pext

Maybe I'm just blind, but I couldn't find one on the page.

CVE-2018-14042 Medium Severity Vulnerability detected by WhiteSource

CVE-2018-14042 - Medium Severity Vulnerability

Vulnerable Library - bootstrap-3.3.7-3.3.7.js

Google-styled theme for Bootstrap.

path: /Website/bootstrap-3.3.7-dist/js/bootstrap.js

Library home page: https://cdnjs.cloudflare.com/ajax/libs/todc-bootstrap/3.3.7-3.3.7/js/bootstrap.js

Dependency Hierarchy:

• ❌ bootstrap-3.3.7-3.3.7.js (Vulnerable Library)

Vulnerability Details

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

Publish Date: 2018-07-13

URL: CVE-2018-14042

CVSS 3 Score Details (6.1)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: Low
  • Availability Impact: None

For more information on CVSS3 Scores, click here.

---

Step up your Open Source Security Game with WhiteSource here

WS-2018-0021 Medium Severity Vulnerability detected by WhiteSource

WS-2018-0021 - Medium Severity Vulnerability

Vulnerable Library - bootstrap-3.3.7-3.3.7.js

Google-styled theme for Bootstrap.

path: /Website/bootstrap-3.3.7-dist/js/bootstrap.js

Library home page: https://cdnjs.cloudflare.com/ajax/libs/todc-bootstrap/3.3.7-3.3.7/js/bootstrap.js

Dependency Hierarchy:

• ❌ bootstrap-3.3.7-3.3.7.js (Vulnerable Library)

Vulnerability Details

XSS in data-target in bootstrap (3.3.7 and before)

Publish Date: 2017-06-27

URL: WS-2018-0021

CVSS 2 Score Details (6.5)

Base Score Metrics not available

Suggested Fix

Type: Change files

Origin: twbs/bootstrap@d9be1da

Release Date: 2017-08-25

Fix Resolution: Replace or update the following files: alert.js, carousel.js, collapse.js, dropdown.js, modal.js

---

Step up your Open Source Security Game with WhiteSource here

CVE-2018-14040 Medium Severity Vulnerability detected by WhiteSource

CVE-2018-14040 - Medium Severity Vulnerability

Vulnerable Library - bootstrap-3.3.7-3.3.7.js

Google-styled theme for Bootstrap.

path: /Website/bootstrap-3.3.7-dist/js/bootstrap.js

Library home page: https://cdnjs.cloudflare.com/ajax/libs/todc-bootstrap/3.3.7-3.3.7/js/bootstrap.js

Dependency Hierarchy:

• ❌ bootstrap-3.3.7-3.3.7.js (Vulnerable Library)

Vulnerability Details

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

Publish Date: 2018-07-13

URL: CVE-2018-14040

CVSS 3 Score Details (6.1)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: Low
  • Availability Impact: None

For more information on CVSS3 Scores, click here.

---

Step up your Open Source Security Game with WhiteSource here

CVE-2018-14041 Medium Severity Vulnerability detected by WhiteSource

CVE-2018-14041 - Medium Severity Vulnerability

Vulnerable Library - bootstrap-3.3.7-3.3.7.js

Google-styled theme for Bootstrap.

path: /Website/bootstrap-3.3.7-dist/js/bootstrap.js

Library home page: https://cdnjs.cloudflare.com/ajax/libs/todc-bootstrap/3.3.7-3.3.7/js/bootstrap.js

Dependency Hierarchy:

• ❌ bootstrap-3.3.7-3.3.7.js (Vulnerable Library)

Vulnerability Details

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

Publish Date: 2018-07-13

URL: CVE-2018-14041

CVSS 3 Score Details (6.1)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: Low
  • Availability Impact: None

For more information on CVSS3 Scores, click here.

---

Step up your Open Source Security Game with WhiteSource here