In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcryptoUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade custodiaUpgrade python3-yubicoUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade python3-pyusb | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-server-dns | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade ipa-healthcheckUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-runtimeUpgrade python-nss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade ipa-client-epnUpgrade ipa-client-sambaUpgrade python3-pyusbUpgrade xsomUpgrade jss-debuginfoUpgrade python3-ipaclientUpgrade ipa-server-commonUpgrade pki-core-debugsourceUpgrade pki-core-debuginfoUpgrade ipa-healthcheck-coreUpgrade pki-serverUpgrade glassfish-jaxb-coreUpgrade custodiaUpgrade slf4jUpgrade javassist-javadocUpgrade apache-commons-netUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade ipa-client-debuginfoUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade jssUpgrade python-nss-docUpgrade pki-toolsUpgrade python3-ipaserverUpgrade xalan-j2Upgrade python3-jwcryptoUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade jackson-coreUpgrade opendnssec-debugsourceUpgrade softhsm-debuginfoUpgrade ipa-selinuxUpgrade pki-kraUpgrade jss-debugsourceUpgrade pki-caUpgrade bind-dyndb-ldap-debuginfoUpgrade xml-commons-resolverUpgrade pki-servlet-4.0-apiUpgrade pki-symkeyUpgrade glassfish-jaxb-txw2Upgrade ipa-server-trust-ad-debuginfoUpgrade python2-ipaserverUpgrade resteasyUpgrade ldapjdkUpgrade ipa-clientUpgrade slf4j-jdk14Upgrade python3-ipalibUpgrade stax-exUpgrade ipa-server-debuginfoUpgrade python3-qrcode-coreUpgrade ipa-debugsourceUpgrade opendnssec-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade jackson-databindUpgrade javassistUpgrade jss-javadocUpgrade xmlstreambufferUpgrade python3-kdcproxyUpgrade python3-nssUpgrade ipa-debuginfoUpgrade ldapjdk-javadocUpgrade jakarta-commons-httpclientUpgrade softhsm-debugsourceUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade pki-base-javaUpgrade pki-baseUpgrade softhsmUpgrade tomcatjssUpgrade glassfish-jaxb-apiUpgrade opendnssecUpgrade ipa-python-compatUpgrade pki-servlet-engineUpgrade xml-commons-apisUpgrade softhsm-develUpgrade pki-tools-debuginfoUpgrade python2-ipalibUpgrade glassfish-fastinfosetUpgrade apache-commons-langUpgrade bea-stax-apiUpgrade python3-yubicoUpgrade python3-custodiaUpgrade pki-symkey-debuginfoUpgrade slapi-nisUpgrade ipa-commonUpgrade velocityUpgrade ipa-serverUpgrade jackson-jaxrs-providersUpgrade python3-pkiUpgrade xerces-j2Upgrade slapi-nis-debuginfoUpgrade slapi-nis-debugsource | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 19, 2021 |
| Oracle_linux | — | Upgrade python-nss-docUpgrade python3-ipaclientUpgrade relaxngDatatypeUpgrade ipa-client-sambaUpgrade opendnssecUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade pki-servlet-engineUpgrade javassist-javadocUpgrade python3-kdcproxyUpgrade xalan-j2Upgrade ipa-client-commonUpgrade javassistUpgrade apache-commons-collectionsUpgrade python3-qrcodeUpgrade jakarta-commons-httpclientUpgrade python2-ipalibUpgrade pki-symkeyUpgrade jackson-annotationsUpgrade glassfish-jaxb-apiUpgrade bind-dyndb-ldapUpgrade xsomUpgrade ldapjdk-javadocUpgrade ipa-healthcheck-coreUpgrade python3-qrcode-coreUpgrade jssUpgrade ipa-server-dnsUpgrade stax-exUpgrade pki-toolsUpgrade python3-custodiaUpgrade python3-nssUpgrade pki-caUpgrade ipa-client-epnUpgrade softhsmUpgrade velocityUpgrade python3-pyusbUpgrade glassfish-jaxb-coreUpgrade ipa-python-compatUpgrade python3-pkiUpgrade ipa-healthcheckUpgrade jackson-jaxrs-json-providerUpgrade apache-commons-langUpgrade glassfish-jaxb-runtimeUpgrade xerces-j2Upgrade bea-stax-apiUpgrade ipa-clientUpgrade resteasyUpgrade glassfish-jaxb-txw2Upgrade softhsm-develUpgrade jackson-module-jaxb-annotationsUpgrade ldapjdkUpgrade slapi-nisUpgrade xmlstreambufferUpgrade pki-kraUpgrade pki-base-javaUpgrade ipa-server-trust-adUpgrade tomcatjssUpgrade python3-yubicoUpgrade pki-baseUpgrade ipa-selinuxUpgrade pki-servlet-4.0-apiUpgrade jackson-coreUpgrade xml-commons-apisUpgrade ipa-commonUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade pki-serverUpgrade jackson-databindUpgrade jss-javadocUpgrade jackson-jaxrs-providersUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade apache-commons-netUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade ipa-serverUpgrade custodiaUpgrade xml-commons-resolverUpgrade slf4j-jdk14 | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade ipa-python-compatUpgrade glassfish-jaxb-runtimeUpgrade python3-kdcproxyUpgrade xmlstreambufferUpgrade pki-servlet-engineUpgrade ipa-server-trust-ad-debuginfoUpgrade glassfish-jaxb-coreUpgrade python2-ipaserverUpgrade python3-nssUpgrade pki-core-debuginfoUpgrade slf4j-jdk14Upgrade ipa-client-commonUpgrade jss-javadocUpgrade pki-core-debugsourceUpgrade python3-pyusbUpgrade opendnssec-debuginfoUpgrade glassfish-jaxb-apiUpgrade pki-tools-debuginfoUpgrade python2-ipaclientUpgrade ipa-client-debuginfoUpgrade apache-commons-collectionsUpgrade softhsm-develUpgrade ipa-healthcheck-coreUpgrade opendnssec-debugsourceUpgrade opendnssecUpgrade glassfish-jaxb-txw2Upgrade custodiaUpgrade python3-yubicoUpgrade ipa-server-debuginfoUpgrade jackson-coreUpgrade pki-symkeyUpgrade ipa-clientUpgrade jackson-jaxrs-providersUpgrade ipa-healthcheckUpgrade jackson-databindNo solution existsUpgrade tomcatjssUpgrade ipa-debugsourceUpgrade xml-commons-resolverUpgrade pki-baseUpgrade stax-exUpgrade ipa-serverUpgrade bea-stax-apiUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade xerces-j2Upgrade ipa-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade resteasyUpgrade slapi-nis-debuginfoUpgrade python3-pkiUpgrade velocityUpgrade python3-ipalibUpgrade softhsm-debugsourceUpgrade apache-commons-langUpgrade slapi-nisUpgrade ldapjdkUpgrade python-nss-debugsourceUpgrade pki-kraUpgrade bind-dyndb-ldapUpgrade python2-ipalibUpgrade slapi-nis-debugsourceUpgrade pki-toolsUpgrade softhsm-debuginfoUpgrade xalan-j2Upgrade pki-base-javaUpgrade pki-servlet-4.0-apiUpgrade jakarta-commons-httpclientUpgrade ipa-server-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade xml-commons-apisUpgrade pki-symkey-debuginfoUpgrade python3-nss-debuginfoUpgrade ipa-selinuxUpgrade jackson-module-jaxb-annotationsUpgrade bind-dyndb-ldap-debugsourceUpgrade javassistUpgrade python3-jwcryptoUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade pki-caUpgrade ipa-server-dnsUpgrade jss-debuginfoUpgrade slf4jUpgrade pki-serverUpgrade python3-ipaserverUpgrade python3-ipaclientUpgrade jssUpgrade python-nss-docUpgrade javassist-javadocUpgrade ldapjdk-javadocUpgrade apache-commons-netUpgrade python3-qrcodeUpgrade relaxngDatatypeUpgrade python3-qrcode-coreUpgrade jackson-annotationsUpgrade softhsmUpgrade glassfish-fastinfosetUpgrade xsomUpgrade jss-debugsourceUpgrade python3-custodia | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-doc | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub