In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade custodiaUpgrade python3-yubico | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade python2-ipaclientUpgrade ipa-commonUpgrade ipa-clientUpgrade python2-ipalib | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade ipa-server-dnsUpgrade pki-core-debugsourceUpgrade velocityUpgrade softhsm-debugsourceUpgrade ldapjdk-javadocUpgrade python3-kdcproxyUpgrade glassfish-jaxb-coreUpgrade ipa-client-debuginfoUpgrade pki-symkeyUpgrade ipa-server-trust-adUpgrade glassfish-jaxb-txw2Upgrade ipa-debugsourceUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade pki-core-debuginfoUpgrade python-nss-docUpgrade pki-tools-debuginfoUpgrade python3-custodiaUpgrade xerces-j2Upgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade xmlstreambufferUpgrade ipa-client-commonUpgrade softhsmUpgrade javassistUpgrade apache-commons-collectionsUpgrade python2-ipalibUpgrade ipa-server-debuginfoUpgrade jakarta-commons-httpclientUpgrade jssUpgrade javassist-javadocUpgrade glassfish-jaxb-apiUpgrade opendnssec-debugsourceUpgrade bea-stax-apiUpgrade python3-pyusbUpgrade slapi-nisUpgrade python3-nssUpgrade python2-ipaclientUpgrade custodiaUpgrade xml-commons-resolverUpgrade ldapjdkUpgrade ipa-python-compatUpgrade opendnssec-debuginfoUpgrade pki-servlet-4.0-apiUpgrade jss-debuginfoUpgrade python3-qrcode-coreUpgrade apache-commons-netUpgrade resteasyUpgrade slf4jUpgrade tomcatjssUpgrade pki-base-javaUpgrade pki-servlet-engineUpgrade slf4j-jdk14Upgrade slapi-nis-debuginfoUpgrade ipa-healthcheckUpgrade pki-symkey-debuginfoUpgrade jackson-module-jaxb-annotationsUpgrade pki-toolsUpgrade ipa-selinuxUpgrade python3-pkiUpgrade python3-nss-debuginfoUpgrade python3-ipaserverUpgrade ipa-debuginfoUpgrade relaxngDatatypeUpgrade python-nss-debugsourceUpgrade jackson-coreUpgrade jackson-annotationsUpgrade python2-ipaserverUpgrade bind-dyndb-ldapUpgrade ipa-serverUpgrade ipa-commonUpgrade xml-commons-apisUpgrade jackson-databindUpgrade xsomUpgrade apache-commons-langUpgrade pki-serverUpgrade python3-jwcryptoUpgrade softhsm-develUpgrade ipa-clientUpgrade softhsm-debuginfoUpgrade jss-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade stax-exUpgrade glassfish-fastinfosetUpgrade python3-yubicoUpgrade pki-kraUpgrade opendnssecUpgrade python3-ipaclientUpgrade pki-caUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade xalan-j2Upgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nis-debugsourceUpgrade jackson-jaxrs-providersUpgrade jackson-jaxrs-json-providerUpgrade jss-javadocUpgrade ipa-server-trust-ad-debuginfo | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Feb 19, 2019 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 18, 2021 |
| Oracle_linux | — | Upgrade glassfish-jaxb-apiUpgrade stax-exUpgrade xml-commons-resolverUpgrade glassfish-jaxb-txw2Upgrade pki-baseUpgrade jakarta-commons-httpclientUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-providersUpgrade ipa-healthcheck-coreUpgrade velocityUpgrade pki-symkeyUpgrade javassistUpgrade python3-ipalibUpgrade python3-kdcproxyUpgrade ipa-client-commonUpgrade apache-commons-collectionsUpgrade slapi-nisUpgrade xmlstreambufferUpgrade python3-qrcodeUpgrade ldapjdk-javadocUpgrade custodiaUpgrade bea-stax-apiUpgrade jssUpgrade pki-servlet-engineUpgrade xerces-j2Upgrade python2-ipalibUpgrade python3-pyusbUpgrade glassfish-jaxb-coreUpgrade python3-nssUpgrade ipa-server-dnsUpgrade ldapjdkUpgrade python-nss-docUpgrade python3-custodiaUpgrade jackson-databindUpgrade slf4j-jdk14Upgrade apache-commons-netUpgrade jackson-annotationsUpgrade ipa-client-sambaUpgrade pki-servlet-4.0-apiUpgrade tomcatjssUpgrade apache-commons-langUpgrade pki-base-javaUpgrade opendnssecUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade ipa-healthcheckUpgrade resteasyUpgrade xsomUpgrade pki-serverUpgrade pki-kraUpgrade pki-toolsUpgrade ipa-clientUpgrade python3-ipaserverUpgrade softhsmUpgrade ipa-commonUpgrade relaxngDatatypeUpgrade pki-caUpgrade javassist-javadocUpgrade python2-ipaserverUpgrade jackson-module-jaxb-annotationsUpgrade jss-javadocUpgrade python3-yubicoUpgrade xalan-j2Upgrade softhsm-develUpgrade python3-pkiUpgrade ipa-client-epnUpgrade ipa-selinuxUpgrade ipa-serverUpgrade jackson-coreUpgrade xml-commons-apisUpgrade bind-dyndb-ldapUpgrade slf4jUpgrade python3-jwcryptoUpgrade python3-ipaclientUpgrade glassfish-fastinfosetUpgrade python3-qrcode-coreUpgrade jackson-jaxrs-json-provider | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade tomcatjssUpgrade python3-qrcode-coreUpgrade pki-tools-debuginfoUpgrade opendnssecUpgrade python3-ipaserverUpgrade ipa-server-trust-adUpgrade ipa-clientUpgrade python2-ipaserverUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade ipa-serverUpgrade ipa-selinuxUpgrade pki-servlet-engineUpgrade glassfish-fastinfosetNo solution existsUpgrade softhsmUpgrade pki-core-debuginfoUpgrade opendnssec-debugsourceUpgrade ipa-debugsourceUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-resolverUpgrade jackson-module-jaxb-annotationsUpgrade slapi-nis-debugsourceUpgrade pki-baseUpgrade ldapjdkUpgrade glassfish-jaxb-coreUpgrade xml-commons-apisUpgrade ipa-commonUpgrade python3-pkiUpgrade ipa-debuginfoUpgrade softhsm-develUpgrade bea-stax-apiUpgrade opendnssec-debuginfoUpgrade stax-exUpgrade resteasyUpgrade slapi-nis-debuginfoUpgrade ipa-server-debuginfoUpgrade pki-core-debugsourceUpgrade slf4j-jdk14Upgrade pki-base-javaUpgrade python3-ipalibUpgrade ipa-healthcheckUpgrade ldapjdk-javadocUpgrade jss-javadocUpgrade xmlstreambufferUpgrade python2-ipaclientUpgrade glassfish-jaxb-runtimeUpgrade slapi-nisUpgrade jackson-coreUpgrade pki-symkey-debuginfoUpgrade jackson-jaxrs-providersUpgrade python3-yubicoUpgrade velocityUpgrade apache-commons-langUpgrade xerces-j2Upgrade python2-ipalibUpgrade jackson-databindUpgrade glassfish-jaxb-apiUpgrade apache-commons-collectionsUpgrade xsomUpgrade bind-dyndb-ldap-debugsourceUpgrade python-nss-debugsourceUpgrade pki-symkeyUpgrade ipa-server-dnsUpgrade bind-dyndb-ldapUpgrade apache-commons-netUpgrade xalan-j2Upgrade softhsm-debuginfoUpgrade jss-debugsourceUpgrade ipa-client-sambaUpgrade slf4jUpgrade jssUpgrade ipa-server-commonUpgrade pki-servlet-4.0-apiUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-kdcproxyUpgrade jakarta-commons-httpclientUpgrade ipa-healthcheck-coreUpgrade ipa-client-epnUpgrade python3-pyusbUpgrade jss-debuginfoUpgrade ipa-client-commonUpgrade relaxngDatatypeUpgrade python3-nss-debuginfoUpgrade python3-nssUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipaclientUpgrade custodiaUpgrade python3-qrcodeUpgrade jackson-annotationsUpgrade pki-serverUpgrade python-nss-docUpgrade javassistUpgrade glassfish-jaxb-txw2Upgrade softhsm-debugsourceUpgrade python3-jwcryptoUpgrade pki-caUpgrade ipa-client-debuginfoUpgrade javassist-javadocUpgrade pki-kraUpgrade pki-tools | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python3-nssUpgrade python-nss-debugsourceUpgrade python-nss-doc | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub