In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-yubicoUpgrade custodiaUpgrade python3-custodiaUpgrade python3-jwcrypto | May 4, 2022 | Jan 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaclientUpgrade ipa-server-commonUpgrade python2-ipalibUpgrade ipa-server-trust-adUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade ipa-client-commonUpgrade ipa-serverUpgrade python2-ipaserverUpgrade ipa-commonUpgrade ipa-client | Oct 28, 2020 | Jan 9, 2019 |
| Centos_linux | — | Upgrade ipa-server-trust-adUpgrade opendnssec-debuginfoUpgrade python3-nssUpgrade custodiaUpgrade apache-commons-netUpgrade python3-pkiUpgrade ipa-client-debuginfoUpgrade pki-servlet-4.0-apiUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-txw2Upgrade tomcatjssUpgrade ipa-clientUpgrade ipa-client-commonUpgrade python3-yubicoUpgrade xerces-j2Upgrade slapi-nis-debuginfoUpgrade ldapjdkUpgrade ipa-selinuxUpgrade resteasyUpgrade python3-ipalibUpgrade python3-pyusbUpgrade softhsm-debuginfoUpgrade pki-tools-debuginfoUpgrade slapi-nisUpgrade glassfish-jaxb-runtimeUpgrade pki-core-debugsourceUpgrade opendnssec-debugsourceUpgrade pki-core-debuginfoUpgrade bea-stax-apiUpgrade ipa-serverUpgrade jackson-coreUpgrade bind-dyndb-ldap-debugsourceUpgrade apache-commons-langUpgrade javassist-javadocUpgrade pki-baseUpgrade xml-commons-resolverUpgrade pki-base-javaUpgrade ipa-debugsourceUpgrade jackson-databindUpgrade xml-commons-apisUpgrade ipa-server-commonUpgrade xmlstreambufferUpgrade python3-kdcproxyUpgrade glassfish-jaxb-coreUpgrade python2-ipaserverUpgrade ipa-server-debuginfoUpgrade ipa-healthcheckUpgrade python2-ipaclientUpgrade jss-javadocUpgrade ipa-commonUpgrade ipa-server-trust-ad-debuginfoUpgrade softhsm-debugsourceUpgrade jackson-annotationsUpgrade ldapjdk-javadocUpgrade pki-serverUpgrade pki-symkeyUpgrade slf4jUpgrade python2-ipalibUpgrade softhsmUpgrade python3-ipaserverUpgrade python-nss-docUpgrade jss-debuginfoUpgrade python3-nss-debuginfoUpgrade python3-jwcryptoUpgrade relaxngDatatypeUpgrade ipa-python-compatUpgrade opendnssecUpgrade pki-servlet-engineUpgrade python3-ipaclientUpgrade ipa-server-dnsUpgrade stax-exUpgrade slapi-nis-debugsourceUpgrade velocityUpgrade python3-qrcodeUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-custodiaUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade slf4j-jdk14Upgrade pki-kraUpgrade pki-caUpgrade jssUpgrade ipa-client-epnUpgrade xsomUpgrade javassistUpgrade jackson-jaxrs-providersUpgrade python3-qrcode-coreUpgrade ipa-healthcheck-coreUpgrade pki-toolsUpgrade xalan-j2Upgrade jss-debugsourceUpgrade glassfish-jaxb-apiUpgrade pki-symkey-debuginfoUpgrade glassfish-fastinfosetUpgrade jakarta-commons-httpclientUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-collectionsUpgrade python-nss-debugsource | Oct 1, 2020 | Jan 9, 2019 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 27, 2023 |
| Oracle_linux | — | Upgrade jackson-jaxrs-providersUpgrade apache-commons-langUpgrade xml-commons-resolverUpgrade jackson-jaxrs-json-providerUpgrade tomcatjssUpgrade pki-caUpgrade python2-ipaserverUpgrade ipa-serverUpgrade python3-pkiUpgrade jackson-databindUpgrade python3-ipaserverUpgrade xml-commons-apisUpgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheckUpgrade ipa-selinuxUpgrade ipa-server-trust-adUpgrade xmlstreambufferUpgrade relaxngDatatypeUpgrade resteasyUpgrade jackson-coreUpgrade xerces-j2Upgrade bea-stax-apiUpgrade slf4j-jdk14Upgrade ipa-commonUpgrade python3-yubicoUpgrade pki-kraUpgrade ipa-clientUpgrade python3-jwcryptoUpgrade custodiaUpgrade jackson-annotationsUpgrade pki-serverUpgrade pki-baseUpgrade python2-ipaclientUpgrade python3-ipalibUpgrade ldapjdkUpgrade pki-servlet-4.0-apiUpgrade jackson-module-jaxb-annotationsUpgrade ipa-client-sambaUpgrade xsomUpgrade jss-javadocUpgrade ipa-client-epnUpgrade slapi-nisUpgrade ipa-client-commonUpgrade opendnssecUpgrade jakarta-commons-httpclientUpgrade glassfish-fastinfosetUpgrade stax-exUpgrade velocityUpgrade python-nss-docUpgrade javassist-javadocUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade python3-ipaclientUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade pki-toolsUpgrade softhsm-develUpgrade python3-qrcode-coreUpgrade pki-servlet-engineUpgrade ldapjdk-javadocUpgrade javassistUpgrade bind-dyndb-ldapUpgrade xalan-j2Upgrade python3-pyusbUpgrade softhsmUpgrade pki-symkeyUpgrade pki-base-javaUpgrade python2-ipalibUpgrade python3-nssUpgrade jssUpgrade glassfish-jaxb-txw2Upgrade ipa-server-dnsUpgrade python3-kdcproxyUpgrade apache-commons-netUpgrade python3-custodiaUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade glassfish-jaxb-apiUpgrade slf4j | Oct 7, 2020 | Jun 27, 2016 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2016 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade python2-ipaclientUpgrade xsomNo solution existsUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade bea-stax-apiUpgrade ipa-clientUpgrade xalan-j2Upgrade ipa-debugsourceUpgrade glassfish-jaxb-txw2Upgrade ipa-server-trust-adUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-databindUpgrade slapi-nis-debuginfoUpgrade python3-yubicoUpgrade glassfish-fastinfosetUpgrade ipa-client-debuginfoUpgrade python3-pyusbUpgrade pki-symkeyUpgrade apache-commons-langUpgrade ipa-healthcheck-coreUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade custodiaUpgrade xml-commons-resolverUpgrade ipa-serverUpgrade python3-pkiUpgrade python3-kdcproxyUpgrade softhsmUpgrade apache-commons-collectionsUpgrade python2-ipaserverUpgrade ldapjdkUpgrade pki-baseUpgrade python3-qrcode-coreUpgrade xmlstreambufferUpgrade opendnssec-debugsourceUpgrade jackson-coreUpgrade python3-ipalibUpgrade javassist-javadocUpgrade pki-caUpgrade pki-servlet-4.0-apiUpgrade opendnssecUpgrade python3-nssUpgrade glassfish-jaxb-coreUpgrade xerces-j2Upgrade softhsm-debugsourceUpgrade pki-base-javaUpgrade pki-core-debugsourceUpgrade pki-core-debuginfoUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade apache-commons-netUpgrade jackson-jaxrs-json-providerUpgrade python-nss-docUpgrade ipa-server-commonUpgrade python3-jwcryptoUpgrade jss-javadocUpgrade pki-servlet-engineUpgrade python2-ipalibUpgrade ipa-selinuxUpgrade jss-debuginfoUpgrade slf4jUpgrade tomcatjssUpgrade python-nss-debugsourceUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-apiUpgrade slf4j-jdk14Upgrade javassistUpgrade ipa-python-compatUpgrade jackson-jaxrs-providersUpgrade jss-debugsourceUpgrade pki-symkey-debuginfoUpgrade xml-commons-apisUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-dnsUpgrade python3-ipaserverUpgrade stax-exUpgrade softhsm-debuginfoUpgrade ipa-client-sambaUpgrade bind-dyndb-ldapUpgrade ipa-healthcheckUpgrade velocityUpgrade bind-dyndb-ldap-debugsourceUpgrade jackson-annotationsUpgrade pki-kraUpgrade opendnssec-debuginfoUpgrade python3-ipaclientUpgrade pki-toolsUpgrade ipa-client-epnUpgrade jakarta-commons-httpclientUpgrade ipa-commonUpgrade python3-nss-debuginfoUpgrade python3-qrcodeUpgrade jssUpgrade softhsm-develUpgrade python3-custodiaUpgrade jackson-module-jaxb-annotationsUpgrade resteasyUpgrade slapi-nis-debugsourceUpgrade relaxngDatatypeUpgrade pki-server | Oct 1, 2020 | Jan 9, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-doc | Mar 12, 2024 | Jan 9, 2019 |
| Ubuntu | — | Upgrade twitter-bootstrap3 | Nov 19, 2024 | Jan 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub