In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-yubicoUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade custodiaUpgrade python3-custodiaUpgrade python3-qrcodeUpgrade python3-jwcrypto | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaserverUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade python2-ipaclientUpgrade ipa-serverUpgrade ipa-clientUpgrade python2-ipalib | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade python3-qrcodeUpgrade pki-core-debuginfoUpgrade xerces-j2Upgrade python3-kdcproxyUpgrade python3-custodiaUpgrade bea-stax-apiUpgrade ipa-debugsourceUpgrade python3-ipalibUpgrade stax-exUpgrade softhsm-debugsourceUpgrade python-nss-docUpgrade pki-baseUpgrade glassfish-jaxb-coreUpgrade velocityUpgrade softhsm-debuginfoUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade glassfish-jaxb-runtimeUpgrade pki-symkeyUpgrade slapi-nis-debugsourceUpgrade python2-ipalibUpgrade jackson-databindUpgrade jakarta-commons-httpclientUpgrade ipa-server-dnsUpgrade pki-tools-debuginfoUpgrade opendnssec-debuginfoUpgrade apache-commons-collectionsUpgrade ipa-server-debuginfoUpgrade slf4j-jdk14Upgrade ipa-client-commonUpgrade pki-core-debugsourceUpgrade slapi-nisUpgrade opendnssec-debugsourceUpgrade python3-pyusbUpgrade ipa-server-trust-ad-debuginfoUpgrade xml-commons-resolverUpgrade softhsmUpgrade python3-yubicoUpgrade custodiaUpgrade jss-debuginfoUpgrade glassfish-jaxb-txw2Upgrade javassistUpgrade glassfish-jaxb-apiUpgrade python3-nssUpgrade pki-servlet-engineUpgrade ldapjdkUpgrade ipa-healthcheck-coreUpgrade jackson-jaxrs-providersUpgrade jssUpgrade ipa-server-trust-adUpgrade xmlstreambufferUpgrade ipa-client-debuginfoUpgrade ipa-debuginfoUpgrade apache-commons-netUpgrade resteasyUpgrade javassist-javadocUpgrade softhsm-develUpgrade python3-ipaclientUpgrade jackson-annotationsUpgrade pki-kraUpgrade python3-jwcryptoUpgrade slapi-nis-debuginfoUpgrade opendnssecUpgrade apache-commons-langUpgrade pki-serverUpgrade ipa-client-sambaUpgrade jackson-coreUpgrade python3-pkiUpgrade python-nss-debugsourceUpgrade jss-debugsourceUpgrade pki-servlet-4.0-apiUpgrade xsomUpgrade xml-commons-apisUpgrade relaxngDatatypeUpgrade python3-qrcode-coreUpgrade slf4jUpgrade python3-ipaserverUpgrade ipa-python-compatUpgrade jss-javadocUpgrade tomcatjssUpgrade jackson-module-jaxb-annotationsUpgrade bind-dyndb-ldapUpgrade python3-nss-debuginfoUpgrade pki-symkey-debuginfoUpgrade pki-toolsUpgrade pki-caUpgrade ipa-server-commonUpgrade ipa-commonUpgrade ipa-healthcheckUpgrade pki-base-javaUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-serverUpgrade ldapjdk-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-selinuxUpgrade glassfish-fastinfosetUpgrade xalan-j2Upgrade ipa-client-epnUpgrade jackson-jaxrs-json-providerUpgrade ipa-client | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap3Upgrade twitter-bootstrap4 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php74Upgrade mantis-php73Upgrade mantis-php71Upgrade mantis-php72 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade xmlstreambufferUpgrade bea-stax-apiUpgrade xml-commons-resolverUpgrade jackson-databindUpgrade ldapjdk-javadocUpgrade python3-ipalibUpgrade slapi-nisUpgrade xerces-j2Upgrade pki-baseUpgrade velocityUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade ldapjdkUpgrade python3-yubicoUpgrade jssUpgrade jackson-jaxrs-json-providerUpgrade ipa-selinuxUpgrade python2-ipaclientUpgrade python3-qrcodeUpgrade python3-nssUpgrade ipa-serverUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python-nss-docUpgrade apache-commons-collectionsUpgrade javassistUpgrade ipa-server-trust-adUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade ipa-healthcheck-coreUpgrade jackson-jaxrs-providersUpgrade pki-symkeyUpgrade python3-custodiaUpgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade tomcatjssUpgrade apache-commons-netUpgrade pki-serverUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade pki-base-javaUpgrade jackson-coreUpgrade jackson-annotationsUpgrade xml-commons-apisUpgrade jakarta-commons-httpclientUpgrade python2-ipalibUpgrade pki-servlet-4.0-apiUpgrade ipa-client-epnUpgrade python3-jwcryptoUpgrade pki-caUpgrade ipa-commonUpgrade apache-commons-langUpgrade resteasyUpgrade javassist-javadocUpgrade ipa-server-commonUpgrade pki-kraUpgrade python3-pkiUpgrade opendnssecUpgrade python3-ipaclientUpgrade python3-ipaserverUpgrade jackson-module-jaxb-annotationsUpgrade ipa-clientUpgrade xalan-j2Upgrade custodiaUpgrade pki-toolsUpgrade ipa-server-dnsUpgrade glassfish-jaxb-txw2Upgrade slf4jUpgrade xsomUpgrade relaxngDatatypeUpgrade softhsmUpgrade python3-qrcode-coreUpgrade jss-javadocUpgrade softhsm-develUpgrade python2-ipaserverUpgrade glassfish-fastinfosetUpgrade ipa-python-compatUpgrade ipa-client-commonUpgrade bind-dyndb-ldap | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade apache-commons-langUpgrade resteasyUpgrade xalan-j2Upgrade softhsm-develUpgrade xmlstreambufferUpgrade jackson-databindUpgrade bea-stax-apiUpgrade jakarta-commons-httpclientUpgrade stax-exUpgrade pki-baseUpgrade javassist-javadocUpgrade ipa-client-sambaUpgrade ipa-client-debuginfoUpgrade ldapjdkUpgrade python3-yubicoUpgrade jackson-jaxrs-json-providerUpgrade ipa-server-commonUpgrade pki-symkey-debuginfoUpgrade python3-ipalibUpgrade ipa-clientUpgrade javassistUpgrade pki-kraUpgrade python3-ipaserverUpgrade slapi-nis-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ldapjdk-javadocUpgrade pki-servlet-engineUpgrade glassfish-fastinfosetUpgrade pki-tools-debuginfoUpgrade ipa-server-trust-adUpgrade velocityUpgrade ipa-debuginfoUpgrade python3-qrcode-coreUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade jackson-module-jaxb-annotationsUpgrade python3-pkiUpgrade glassfish-jaxb-apiUpgrade ipa-serverUpgrade softhsmUpgrade pki-serverUpgrade opendnssecUpgrade jss-javadocUpgrade tomcatjssUpgrade ipa-server-debuginfoUpgrade ipa-commonUpgrade ipa-healthcheckUpgrade python2-ipaclientUpgrade opendnssec-debuginfoUpgrade python3-custodiaUpgrade pki-base-javaUpgrade xerces-j2Upgrade xml-commons-apisUpgrade python3-jwcryptoUpgrade jackson-annotationsUpgrade ipa-client-commonNo solution existsUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade python-nss-debugsourceUpgrade softhsm-debuginfoUpgrade python3-pyusbUpgrade apache-commons-netUpgrade jssUpgrade slf4jUpgrade glassfish-jaxb-runtimeUpgrade ipa-debugsourceUpgrade ipa-selinuxUpgrade python-nss-docUpgrade jackson-jaxrs-providersUpgrade pki-core-debuginfoUpgrade pki-toolsUpgrade ipa-healthcheck-coreUpgrade slf4j-jdk14Upgrade pki-servlet-4.0-apiUpgrade softhsm-debugsourceUpgrade ipa-client-epnUpgrade python3-nss-debuginfoUpgrade python2-ipaserverUpgrade ipa-server-dnsUpgrade pki-caUpgrade opendnssec-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade apache-commons-collectionsUpgrade python3-qrcodeUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-coreUpgrade xsomUpgrade pki-symkeyUpgrade python3-kdcproxyUpgrade glassfish-jaxb-coreUpgrade jss-debugsourceUpgrade python3-ipaclientUpgrade custodiaUpgrade relaxngDatatypeUpgrade glassfish-jaxb-txw2Upgrade bind-dyndb-ldapUpgrade xml-commons-resolverUpgrade jss-debuginfoUpgrade python3-nssUpgrade pki-core-debugsource | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfo | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub