In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade custodiaUpgrade python3-jwcryptoUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-kdcproxy | May 4, 2022 | Jan 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade python2-ipalibUpgrade ipa-server-trust-adUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade python2-ipaclientUpgrade ipa-serverUpgrade python2-ipaserverUpgrade ipa-commonUpgrade ipa-client | Oct 28, 2020 | Jan 9, 2019 |
| Centos_linux | — | Upgrade stax-exUpgrade python3-ipaserverUpgrade softhsmUpgrade jssUpgrade javassistUpgrade apache-commons-collectionsUpgrade opendnssecUpgrade ipa-server-dnsUpgrade xsomUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-debugsourceUpgrade ldapjdk-javadocUpgrade pki-servlet-engineUpgrade jss-debuginfoUpgrade slapi-nis-debugsourceUpgrade slf4j-jdk14Upgrade bind-dyndb-ldap-debuginfoUpgrade python3-qrcode-coreUpgrade glassfish-fastinfosetUpgrade pki-symkey-debuginfoUpgrade bind-dyndb-ldapUpgrade jakarta-commons-httpclientUpgrade ipa-healthcheck-coreUpgrade pki-serverUpgrade pki-kraUpgrade python2-ipalibUpgrade python3-qrcodeUpgrade softhsm-develUpgrade jackson-annotationsUpgrade python3-ipaclientUpgrade ipa-client-epnUpgrade pki-symkeyUpgrade pki-toolsUpgrade slf4jUpgrade ipa-debuginfoUpgrade jackson-jaxrs-providersUpgrade python3-nss-debuginfoUpgrade jss-debugsourceUpgrade pki-caUpgrade ipa-client-sambaUpgrade xalan-j2Upgrade python3-jwcryptoUpgrade python3-custodiaUpgrade python-nss-docUpgrade ipa-python-compatUpgrade velocityUpgrade relaxngDatatypeUpgrade glassfish-jaxb-apiUpgrade javassist-javadocUpgrade python3-pkiUpgrade pki-core-debugsourceUpgrade python3-yubicoUpgrade pki-servlet-4.0-apiUpgrade ipa-client-debuginfoUpgrade xml-commons-apisUpgrade ipa-server-trust-adUpgrade ipa-selinuxUpgrade python2-ipaclientUpgrade ipa-client-commonUpgrade pki-tools-debuginfoUpgrade apache-commons-netUpgrade glassfish-jaxb-txw2Upgrade bea-stax-apiUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-coreUpgrade xerces-j2Upgrade ipa-debugsourceUpgrade softhsm-debugsourceUpgrade python3-pyusbUpgrade slapi-nis-debuginfoUpgrade ldapjdkUpgrade jackson-databindUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade python3-nssUpgrade resteasyUpgrade ipa-server-commonUpgrade pki-base-javaUpgrade ipa-commonUpgrade pki-core-debuginfoUpgrade softhsm-debuginfoUpgrade apache-commons-langUpgrade jss-javadocUpgrade jackson-jaxrs-json-providerUpgrade tomcatjssUpgrade xmlstreambufferUpgrade opendnssec-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade custodiaUpgrade xml-commons-resolverUpgrade pki-baseUpgrade glassfish-jaxb-coreUpgrade ipa-healthcheckUpgrade glassfish-jaxb-runtimeUpgrade python2-ipaserverUpgrade ipa-serverUpgrade python3-kdcproxyUpgrade ipa-clientUpgrade opendnssec-debuginfoUpgrade python3-ipalib | Oct 1, 2020 | Jan 9, 2019 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 27, 2023 |
| Oracle_linux | — | Upgrade ipa-selinuxUpgrade tomcatjssUpgrade glassfish-jaxb-runtimeUpgrade xsomUpgrade python2-ipaserverUpgrade jss-javadocUpgrade ipa-client-sambaUpgrade pki-servlet-4.0-apiUpgrade ipa-clientUpgrade python3-ipalibUpgrade python3-pkiUpgrade pki-caUpgrade python3-jwcryptoUpgrade ldapjdkUpgrade xmlstreambufferUpgrade pki-serverUpgrade relaxngDatatypeUpgrade ipa-client-epnUpgrade jackson-annotationsUpgrade jackson-coreUpgrade python3-yubicoUpgrade slf4j-jdk14Upgrade xerces-j2Upgrade ipa-server-trust-adUpgrade xml-commons-apisUpgrade pki-baseUpgrade python3-ipaserverUpgrade jackson-databindUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade xml-commons-resolverUpgrade ipa-commonUpgrade jackson-jaxrs-json-providerUpgrade ipa-healthcheckUpgrade bea-stax-apiUpgrade resteasyUpgrade jackson-jaxrs-providersUpgrade slapi-nisUpgrade custodiaUpgrade pki-kraUpgrade python2-ipaclientUpgrade ipa-serverUpgrade ipa-server-commonUpgrade pki-toolsUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade javassist-javadocUpgrade softhsm-develUpgrade apache-commons-collectionsUpgrade python3-qrcode-coreUpgrade ldapjdk-javadocUpgrade pki-servlet-engineUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade ipa-python-compatUpgrade python3-kdcproxyUpgrade python3-custodiaUpgrade ipa-server-dnsUpgrade apache-commons-netUpgrade xalan-j2Upgrade jssUpgrade python3-pyusbUpgrade python2-ipalibUpgrade python3-nssUpgrade pki-base-javaUpgrade jakarta-commons-httpclientUpgrade stax-exUpgrade opendnssecUpgrade glassfish-jaxb-apiUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade velocityUpgrade pki-symkeyUpgrade glassfish-jaxb-txw2Upgrade softhsmUpgrade ipa-client-commonUpgrade python3-ipaclientUpgrade python-nss-docUpgrade ipa-healthcheck-core | Oct 7, 2020 | Jun 27, 2016 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2016 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 9, 2019 |
| Redhat_linux | — | No solution existsUpgrade python3-ipalibUpgrade pki-servlet-4.0-apiUpgrade softhsmUpgrade pki-caUpgrade pki-core-debugsourceUpgrade softhsm-debugsourceUpgrade javassist-javadocUpgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade ipa-client-debuginfoUpgrade ipa-healthcheck-coreUpgrade ipa-server-debuginfoUpgrade ipa-debugsourceUpgrade glassfish-fastinfosetUpgrade python3-pyusbUpgrade jackson-coreUpgrade apache-commons-collectionsUpgrade jackson-jaxrs-json-providerUpgrade python-nss-docUpgrade ipa-debuginfoUpgrade pki-tools-debuginfoUpgrade python3-nssUpgrade ipa-server-commonUpgrade opendnssecUpgrade jackson-databindUpgrade ldapjdkUpgrade python3-kdcproxyUpgrade python3-pkiUpgrade slapi-nisUpgrade xsomUpgrade python3-qrcode-coreUpgrade xml-commons-resolverUpgrade apache-commons-netUpgrade bea-stax-apiUpgrade xerces-j2Upgrade python2-ipaserverUpgrade apache-commons-langUpgrade ipa-server-trust-adUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade python3-yubicoUpgrade pki-symkeyUpgrade custodiaUpgrade glassfish-jaxb-coreUpgrade pki-core-debuginfoUpgrade slapi-nis-debuginfoUpgrade ipa-client-commonUpgrade xmlstreambufferUpgrade opendnssec-debugsourceUpgrade ipa-clientUpgrade python2-ipaclientUpgrade pki-base-javaUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-serverUpgrade python2-ipalibUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-symkey-debuginfoUpgrade python3-qrcodeUpgrade xml-commons-apisUpgrade slf4j-jdk14Upgrade python-nss-debugsourceUpgrade jss-debuginfoUpgrade tomcatjssUpgrade python3-nss-debuginfoUpgrade javassistUpgrade ipa-python-compatUpgrade pki-kraUpgrade jss-javadocUpgrade glassfish-jaxb-apiUpgrade slapi-nis-debugsourceUpgrade relaxngDatatypeUpgrade stax-exUpgrade resteasyUpgrade jss-debugsourceUpgrade pki-toolsUpgrade jakarta-commons-httpclientUpgrade opendnssec-debuginfoUpgrade python3-ipaserverUpgrade jackson-module-jaxb-annotationsUpgrade softhsm-debuginfoUpgrade slf4jUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-healthcheckUpgrade velocityUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade pki-servlet-engineUpgrade jackson-annotationsUpgrade ipa-commonUpgrade jssUpgrade jackson-jaxrs-providersUpgrade pki-serverUpgrade ipa-server-dnsUpgrade ldapjdk-javadocUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade softhsm-develUpgrade python3-ipaclientUpgrade ipa-selinuxUpgrade python3-jwcrypto | Oct 1, 2020 | Jan 9, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-doc | Mar 12, 2024 | Jan 9, 2019 |
| Ubuntu | — | Upgrade twitter-bootstrap3 | Nov 19, 2024 | Jan 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub