In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-custodiaUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade python3-qrcode | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade ipa-debuginfoUpgrade ipa-serverUpgrade ipa-python-compatUpgrade python2-ipaclientUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-clientUpgrade python2-ipalibUpgrade ipa-server-dns | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade pki-servlet-4.0-apiUpgrade ipa-client-debuginfoUpgrade xmlstreambufferUpgrade ipa-server-trust-adUpgrade jakarta-commons-httpclientUpgrade ipa-server-dnsUpgrade pki-tools-debuginfoUpgrade ipa-python-compatUpgrade glassfish-jaxb-apiUpgrade xerces-j2Upgrade python3-ipalibUpgrade ipa-server-debuginfoUpgrade python3-qrcodeUpgrade xml-commons-resolverUpgrade ipa-server-commonUpgrade glassfish-jaxb-runtimeUpgrade ipa-debugsourceUpgrade velocityUpgrade ipa-healthcheck-coreUpgrade slapi-nisUpgrade pki-core-debuginfoUpgrade python-nss-docUpgrade opendnssec-debuginfoUpgrade python2-ipalibUpgrade ldapjdkUpgrade jssUpgrade bea-stax-apiUpgrade glassfish-jaxb-coreUpgrade python3-qrcode-coreUpgrade glassfish-jaxb-txw2Upgrade custodiaUpgrade javassistUpgrade python3-kdcproxyUpgrade python3-custodiaUpgrade pki-symkeyUpgrade python2-ipaclientUpgrade ldapjdk-javadocUpgrade python3-nssUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade ipa-client-commonUpgrade softhsmUpgrade jss-debuginfoUpgrade opendnssec-debugsourceUpgrade pki-baseUpgrade python3-pyusbUpgrade softhsm-debugsourceUpgrade pki-core-debugsourceUpgrade opendnssecUpgrade ipa-client-epnUpgrade ipa-debuginfoUpgrade python2-ipaserverUpgrade relaxngDatatypeUpgrade ipa-clientUpgrade jackson-module-jaxb-annotationsUpgrade pki-kraUpgrade python3-ipaclientUpgrade ipa-client-sambaUpgrade ipa-selinuxUpgrade xsomUpgrade python-nss-debugsourceUpgrade resteasyUpgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-healthcheckUpgrade pki-toolsUpgrade python3-yubicoUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade xalan-j2Upgrade apache-commons-langUpgrade python3-ipaserverUpgrade jackson-jaxrs-json-providerUpgrade ipa-serverUpgrade python3-pkiUpgrade pki-base-javaUpgrade pki-serverUpgrade softhsm-develUpgrade slf4j-jdk14Upgrade slapi-nis-debugsourceUpgrade tomcatjssUpgrade jackson-jaxrs-providersUpgrade jackson-coreUpgrade softhsm-debuginfoUpgrade stax-exUpgrade jackson-annotationsUpgrade jackson-databindUpgrade xml-commons-apisUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-servlet-engineUpgrade pki-symkey-debuginfoUpgrade apache-commons-netUpgrade jss-javadocUpgrade slapi-nis-debuginfoUpgrade slf4jUpgrade pki-caUpgrade glassfish-fastinfoset | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Feb 19, 2019 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 18, 2021 |
| Oracle_linux | — | Upgrade xerces-j2Upgrade custodiaUpgrade jssUpgrade python3-kdcproxyUpgrade glassfish-jaxb-txw2Upgrade python2-ipaclientUpgrade bea-stax-apiUpgrade velocityUpgrade stax-exUpgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade python3-ipalibUpgrade ipa-healthcheck-coreUpgrade ipa-client-commonUpgrade pki-baseUpgrade glassfish-jaxb-coreUpgrade python3-custodiaUpgrade apache-commons-collectionsUpgrade ipa-server-dnsUpgrade python2-ipalibUpgrade xmlstreambufferUpgrade ldapjdk-javadocUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade javassistUpgrade jackson-jaxrs-providersUpgrade slf4j-jdk14Upgrade python-nss-docUpgrade python3-qrcodeUpgrade ipa-server-trust-adUpgrade jakarta-commons-httpclientUpgrade pki-symkeyUpgrade pki-servlet-engineUpgrade python3-pyusbUpgrade slapi-nisUpgrade ldapjdkUpgrade xml-commons-resolverUpgrade opendnssecUpgrade python3-ipaclientUpgrade apache-commons-langUpgrade python3-yubicoUpgrade jackson-jaxrs-json-providerUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade bind-dyndb-ldapUpgrade xsomUpgrade softhsm-develUpgrade ipa-client-sambaUpgrade tomcatjssUpgrade ipa-serverUpgrade slf4jUpgrade ipa-selinuxUpgrade pki-servlet-4.0-apiUpgrade python3-jwcryptoUpgrade pki-kraUpgrade python3-qrcode-coreUpgrade python3-ipaserverUpgrade ipa-clientUpgrade jackson-module-jaxb-annotationsUpgrade xalan-j2Upgrade javassist-javadocUpgrade pki-serverUpgrade glassfish-fastinfosetUpgrade jss-javadocUpgrade xml-commons-apisUpgrade pki-toolsUpgrade python3-pkiUpgrade pki-base-javaUpgrade softhsmUpgrade ipa-healthcheckUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade ipa-commonUpgrade python2-ipaserverUpgrade pki-caUpgrade ipa-client-epnUpgrade resteasyUpgrade jackson-coreUpgrade apache-commons-net | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade pki-tools-debuginfoUpgrade pki-base-javaUpgrade apache-commons-langUpgrade ldapjdkUpgrade python2-ipaclientUpgrade bea-stax-apiUpgrade ipa-python-compatUpgrade pki-core-debugsourceUpgrade ipa-debugsourceUpgrade python3-ipaserverUpgrade pki-core-debuginfoUpgrade ipa-clientUpgrade xerces-j2Upgrade python3-pkiUpgrade python2-ipalibUpgrade glassfish-fastinfosetUpgrade xmlstreambufferUpgrade ipa-commonUpgrade ipa-debuginfoUpgrade softhsmUpgrade stax-exUpgrade slapi-nis-debuginfoUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade jackson-jaxrs-providersNo solution existsUpgrade velocityUpgrade ipa-serverUpgrade pki-baseUpgrade jackson-module-jaxb-annotationsUpgrade ipa-server-trust-adUpgrade slf4j-jdk14Upgrade python3-ipalibUpgrade slapi-nis-debugsourceUpgrade resteasyUpgrade jackson-databindUpgrade pki-servlet-engineUpgrade ipa-server-debuginfoUpgrade ldapjdk-javadocUpgrade pki-symkey-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-resolverUpgrade softhsm-develUpgrade opendnssec-debuginfoUpgrade python3-yubicoUpgrade ipa-healthcheckUpgrade glassfish-jaxb-runtimeUpgrade jss-javadocUpgrade slapi-nisUpgrade ipa-server-dnsUpgrade glassfish-jaxb-apiUpgrade jssUpgrade opendnssecUpgrade custodiaUpgrade pki-serverUpgrade ipa-server-trust-ad-debuginfoUpgrade tomcatjssUpgrade jakarta-commons-httpclientUpgrade python3-nss-debuginfoUpgrade relaxngDatatypeUpgrade glassfish-jaxb-txw2Upgrade javassist-javadocUpgrade apache-commons-netUpgrade ipa-server-commonUpgrade jackson-coreUpgrade bind-dyndb-ldapUpgrade python3-pyusbUpgrade pki-kraUpgrade slf4jUpgrade pki-caUpgrade xalan-j2Upgrade apache-commons-collectionsUpgrade ipa-healthcheck-coreUpgrade pki-servlet-4.0-apiUpgrade ipa-client-sambaUpgrade python3-nssUpgrade bind-dyndb-ldap-debugsourceUpgrade jss-debuginfoUpgrade xsomUpgrade jackson-annotationsUpgrade ipa-selinuxUpgrade python3-kdcproxyUpgrade pki-toolsUpgrade python3-qrcodeUpgrade softhsm-debugsourceUpgrade javassistUpgrade python-nss-docUpgrade python3-ipaclientUpgrade python3-jwcryptoUpgrade pki-symkeyUpgrade jss-debugsourceUpgrade ipa-client-debuginfoUpgrade ipa-client-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-epnUpgrade python-nss-debugsourceUpgrade softhsm-debuginfoUpgrade xml-commons-apisUpgrade glassfish-jaxb-coreUpgrade opendnssec-debugsourceUpgrade python2-ipaserver | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub