In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-jwcryptoUpgrade custodiaUpgrade python3-yubico | May 4, 2022 | Jan 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade python2-ipaserverUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-common | Oct 28, 2020 | Jan 9, 2019 |
| Centos_linux | — | Upgrade pki-baseUpgrade ipa-server-trust-adUpgrade opendnssec-debuginfoUpgrade javassist-javadocUpgrade jss-javadocUpgrade ipa-selinuxUpgrade ipa-debugsourceUpgrade pki-tools-debuginfoUpgrade softhsm-debugsourceUpgrade glassfish-jaxb-txw2Upgrade ipa-clientUpgrade ldapjdkUpgrade slapi-nis-debuginfoUpgrade pki-core-debugsourceUpgrade python3-pyusbUpgrade ipa-client-commonUpgrade tomcatjssUpgrade xerces-j2Upgrade jackson-databindUpgrade ipa-client-debuginfoUpgrade python3-kdcproxyUpgrade python2-ipaserverUpgrade ipa-serverUpgrade ipa-healthcheckUpgrade glassfish-jaxb-coreUpgrade ipa-server-debuginfoUpgrade bea-stax-apiUpgrade glassfish-jaxb-runtimeUpgrade python3-pkiUpgrade slapi-nisUpgrade pki-base-javaUpgrade ipa-commonUpgrade xml-commons-apisUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade custodiaUpgrade apache-commons-langUpgrade opendnssec-debugsourceUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade pki-core-debuginfoUpgrade python3-yubicoUpgrade python3-ipalibUpgrade xml-commons-resolverUpgrade resteasyUpgrade softhsm-debuginfoUpgrade apache-commons-netUpgrade python3-nssUpgrade ipa-server-commonUpgrade python2-ipaclientUpgrade jackson-coreUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-sambaUpgrade python2-ipalibUpgrade jssUpgrade softhsm-develUpgrade python3-ipaserverUpgrade python3-qrcodeUpgrade slapi-nis-debugsourceUpgrade apache-commons-collectionsUpgrade ipa-debuginfoUpgrade slf4j-jdk14Upgrade xsomUpgrade python3-jwcryptoUpgrade xalan-j2Upgrade ldapjdk-javadocUpgrade glassfish-jaxb-apiUpgrade python-nss-docUpgrade ipa-python-compatUpgrade pki-caUpgrade jackson-annotationsUpgrade jss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade pki-servlet-engineUpgrade pki-serverUpgrade opendnssecUpgrade jackson-jaxrs-providersUpgrade jss-debuginfoUpgrade python3-nss-debuginfoUpgrade glassfish-fastinfosetUpgrade pki-kraUpgrade python3-qrcode-coreUpgrade ipa-healthcheck-coreUpgrade pki-toolsUpgrade pki-symkey-debuginfoUpgrade jakarta-commons-httpclientUpgrade python3-custodiaUpgrade pki-symkeyUpgrade bind-dyndb-ldapUpgrade ipa-server-dnsUpgrade javassistUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debuginfoUpgrade velocityUpgrade slf4jUpgrade softhsmUpgrade stax-exUpgrade python3-ipaclientUpgrade relaxngDatatypeUpgrade python-nss-debugsource | Oct 1, 2020 | Jan 9, 2019 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 27, 2023 |
| Oracle_linux | — | Upgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheckUpgrade jackson-module-jaxb-annotationsUpgrade python3-ipalibUpgrade jackson-jaxrs-json-providerUpgrade ipa-selinuxUpgrade jss-javadocUpgrade xml-commons-resolverUpgrade python3-ipaserverUpgrade pki-kraUpgrade relaxngDatatypeUpgrade pki-caUpgrade tomcatjssUpgrade bea-stax-apiUpgrade jackson-databindUpgrade xsomUpgrade ipa-clientUpgrade xmlstreambufferUpgrade jackson-jaxrs-providersUpgrade xml-commons-apisUpgrade python3-pkiUpgrade python2-ipaclientUpgrade ipa-serverUpgrade pki-servlet-4.0-apiUpgrade ipa-server-trust-adUpgrade resteasyUpgrade ipa-client-sambaUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade ipa-commonUpgrade python3-yubicoUpgrade apache-commons-langUpgrade custodiaUpgrade xerces-j2Upgrade pki-baseUpgrade slapi-nisUpgrade python2-ipaserverUpgrade python3-jwcryptoUpgrade ipa-client-epnUpgrade ldapjdkUpgrade pki-serverUpgrade jackson-annotationsUpgrade apache-commons-netUpgrade glassfish-jaxb-coreUpgrade python2-ipalibUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade ipa-server-commonUpgrade stax-exUpgrade slf4jUpgrade jakarta-commons-httpclientUpgrade pki-base-javaUpgrade python3-pyusbUpgrade opendnssecUpgrade glassfish-jaxb-apiUpgrade glassfish-fastinfosetUpgrade python3-nssUpgrade jssUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade bind-dyndb-ldapUpgrade xalan-j2Upgrade softhsm-develUpgrade pki-servlet-engineUpgrade javassistUpgrade apache-commons-collectionsUpgrade python3-kdcproxyUpgrade ipa-python-compatUpgrade pki-toolsUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade ldapjdk-javadocUpgrade softhsmUpgrade velocityUpgrade pki-symkeyUpgrade glassfish-jaxb-txw2Upgrade python3-ipaclientUpgrade python-nss-docUpgrade javassist-javadoc | Oct 7, 2020 | Jun 27, 2016 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2016 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade python2-ipalibUpgrade softhsm-debuginfoUpgrade ipa-client-sambaUpgrade relaxngDatatypeUpgrade pki-symkey-debuginfoUpgrade ldapjdk-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade stax-exUpgrade ipa-server-dnsUpgrade pki-serverUpgrade python3-qrcodeUpgrade python3-ipaserverUpgrade jss-javadocUpgrade bind-dyndb-ldapUpgrade jackson-annotationsUpgrade bind-dyndb-ldap-debugsourceUpgrade xml-commons-apisUpgrade python3-jwcryptoUpgrade pki-toolsUpgrade python3-custodiaUpgrade velocityUpgrade pki-servlet-engineUpgrade opendnssec-debuginfoUpgrade ipa-healthcheckUpgrade jss-debugsourceUpgrade slf4jUpgrade python-nss-debugsourceUpgrade jssUpgrade glassfish-jaxb-apiUpgrade resteasyUpgrade ipa-client-epnUpgrade jakarta-commons-httpclientUpgrade pki-kraUpgrade jackson-module-jaxb-annotationsUpgrade python3-nss-debuginfoUpgrade slapi-nis-debugsourceUpgrade softhsm-develUpgrade tomcatjssUpgrade ipa-python-compatUpgrade javassistUpgrade jackson-jaxrs-providersUpgrade jss-debuginfoUpgrade ipa-selinuxUpgrade slf4j-jdk14Upgrade python3-ipaclientUpgrade ipa-commonUpgrade jackson-databindUpgrade python3-qrcode-coreUpgrade glassfish-fastinfosetUpgrade ipa-clientNo solution existsUpgrade pki-baseUpgrade pki-symkeyUpgrade python3-nssUpgrade ldapjdkUpgrade xerces-j2Upgrade pki-base-javaUpgrade opendnssecUpgrade python3-ipalibUpgrade pki-servlet-4.0-apiUpgrade apache-commons-langUpgrade ipa-server-trust-adUpgrade ipa-healthcheck-coreUpgrade python3-yubicoUpgrade python2-ipaserverUpgrade jackson-jaxrs-json-providerUpgrade ipa-server-commonUpgrade python-nss-docUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-txw2Upgrade softhsmUpgrade pki-caUpgrade softhsm-debugsourceUpgrade javassist-javadocUpgrade xsomUpgrade ipa-debuginfoUpgrade xmlstreambufferUpgrade ipa-serverUpgrade xalan-j2Upgrade ipa-client-commonUpgrade ipa-debugsourceUpgrade pki-core-debugsourceUpgrade python3-kdcproxyUpgrade jackson-coreUpgrade python3-pkiUpgrade glassfish-jaxb-runtimeUpgrade slapi-nis-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-debuginfoUpgrade python3-pyusbUpgrade opendnssec-debugsourceUpgrade pki-core-debuginfoUpgrade xml-commons-resolverUpgrade glassfish-jaxb-coreUpgrade custodiaUpgrade ipa-client-debuginfoUpgrade apache-commons-netUpgrade python2-ipaclientUpgrade bea-stax-apiUpgrade pki-tools-debuginfoUpgrade slapi-nis | Oct 1, 2020 | Jan 9, 2019 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python3-nss | Mar 12, 2024 | Jan 9, 2019 |
| Ubuntu | — | Upgrade twitter-bootstrap3 | Nov 19, 2024 | Jan 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub