In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade custodiaUpgrade python3-kdcproxyUpgrade python3-yubicoUpgrade python3-pyusb | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-dnsUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade ipa-client-commonUpgrade ipa-client | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade slapi-nis-debugsourceUpgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade tomcatjssUpgrade jackson-jaxrs-json-providerUpgrade resteasyUpgrade pki-caUpgrade ipa-selinuxUpgrade relaxngDatatypeUpgrade python3-ipaclientUpgrade ipa-client-sambaUpgrade pki-symkey-debuginfoUpgrade pki-kraUpgrade jss-debugsourceUpgrade opendnssecUpgrade glassfish-fastinfosetUpgrade jackson-databindUpgrade python3-nss-debuginfoUpgrade python3-ipaserverUpgrade bind-dyndb-ldapUpgrade jackson-annotationsUpgrade ipa-server-trust-ad-debuginfoUpgrade jss-javadocUpgrade xml-commons-apisUpgrade python-nss-debugsourceUpgrade apache-commons-netUpgrade slapi-nis-debuginfoUpgrade pki-servlet-engineUpgrade pki-toolsUpgrade ipa-healthcheckUpgrade ipa-debuginfoUpgrade pki-base-javaUpgrade ipa-client-epnUpgrade xsomUpgrade xalan-j2Upgrade stax-exUpgrade python3-yubicoUpgrade bind-dyndb-ldap-debugsourceUpgrade slf4jUpgrade jackson-module-jaxb-annotationsUpgrade python3-jwcryptoUpgrade python2-ipaserverUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-commonUpgrade ipa-clientUpgrade apache-commons-langUpgrade slf4j-jdk14Upgrade softhsm-debuginfoUpgrade ipa-serverUpgrade python3-pkiUpgrade pki-serverUpgrade softhsm-develUpgrade pki-core-debugsourceUpgrade javassistUpgrade javassist-javadocUpgrade python3-qrcode-coreUpgrade custodiaUpgrade ipa-healthcheck-coreUpgrade softhsm-debugsourceUpgrade python2-ipaclientUpgrade python3-custodiaUpgrade pki-baseUpgrade python3-qrcodeUpgrade xerces-j2Upgrade glassfish-jaxb-apiUpgrade opendnssec-debugsourceUpgrade bea-stax-apiUpgrade ipa-python-compatUpgrade python3-ipalibUpgrade glassfish-jaxb-runtimeUpgrade ipa-server-dnsUpgrade ipa-server-debuginfoUpgrade ipa-server-commonUpgrade ldapjdkUpgrade opendnssec-debuginfoUpgrade python2-ipalibUpgrade ipa-debugsourceUpgrade jss-debuginfoUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-coreUpgrade ipa-client-commonUpgrade softhsmUpgrade pki-core-debuginfoUpgrade jssUpgrade pki-servlet-4.0-apiUpgrade pki-tools-debuginfoUpgrade python-nss-docUpgrade slapi-nisUpgrade python3-pyusbUpgrade xml-commons-resolverUpgrade xmlstreambufferUpgrade ipa-server-trust-adUpgrade velocityUpgrade python3-kdcproxyUpgrade pki-symkeyUpgrade glassfish-jaxb-txw2Upgrade ldapjdk-javadocUpgrade jakarta-commons-httpclientUpgrade ipa-client-debuginfoUpgrade python3-nss | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Feb 19, 2019 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 18, 2021 |
| Oracle_linux | — | Upgrade glassfish-fastinfosetUpgrade jackson-jaxrs-json-providerUpgrade opendnssecUpgrade pki-base-javaUpgrade jackson-coreUpgrade resteasyUpgrade xml-commons-apisUpgrade apache-commons-netUpgrade ipa-python-compatUpgrade python3-ipaserverUpgrade pki-serverUpgrade ipa-server-commonUpgrade ipa-clientUpgrade pki-toolsUpgrade pki-kraUpgrade ipa-healthcheckUpgrade ipa-serverUpgrade python3-qrcode-coreUpgrade ipa-selinuxUpgrade slf4jUpgrade tomcatjssUpgrade ipa-client-sambaUpgrade ipa-commonUpgrade python3-ipaclientUpgrade relaxngDatatypeUpgrade python3-yubicoUpgrade softhsmUpgrade apache-commons-langUpgrade jackson-annotationsUpgrade pki-servlet-4.0-apiUpgrade jss-javadocUpgrade jackson-module-jaxb-annotationsUpgrade javassist-javadocUpgrade pki-caUpgrade xalan-j2Upgrade python3-pkiUpgrade softhsm-develUpgrade python2-ipaserverUpgrade ipa-client-epnUpgrade xsomUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade python2-ipalibUpgrade velocityUpgrade stax-exUpgrade ldapjdk-javadocUpgrade python3-kdcproxyUpgrade glassfish-jaxb-txw2Upgrade pki-baseUpgrade jssUpgrade python3-pyusbUpgrade python3-nssUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-apiUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade python3-custodiaUpgrade xmlstreambufferUpgrade apache-commons-collectionsUpgrade slf4j-jdk14Upgrade ldapjdkUpgrade python-nss-docUpgrade ipa-server-dnsUpgrade jakarta-commons-httpclientUpgrade python3-ipalibUpgrade pki-symkeyUpgrade jackson-jaxrs-providersUpgrade javassistUpgrade xml-commons-resolverUpgrade glassfish-jaxb-runtimeUpgrade slapi-nisUpgrade xerces-j2Upgrade bea-stax-apiUpgrade pki-servlet-engineUpgrade custodiaUpgrade jackson-databind | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade jackson-coreUpgrade ipa-commonUpgrade python3-yubicoUpgrade apache-commons-langUpgrade glassfish-jaxb-apiUpgrade python2-ipaserverUpgrade ipa-healthcheckUpgrade opendnssec-debugsourceUpgrade softhsmUpgrade pki-symkey-debuginfoUpgrade xml-commons-apisUpgrade ipa-serverUpgrade python3-qrcode-coreUpgrade jackson-jaxrs-json-providerUpgrade python3-custodiaUpgrade slapi-nis-debuginfoUpgrade jackson-jaxrs-providersUpgrade ldapjdkUpgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade glassfish-fastinfosetUpgrade xmlstreambufferUpgrade ipa-clientUpgrade python2-ipaclientUpgrade pki-baseUpgrade pki-servlet-engineUpgrade pki-core-debuginfoUpgrade jackson-databindUpgrade tomcatjssUpgrade pki-tools-debuginfoUpgrade python2-ipalibUpgrade ipa-server-debuginfoUpgrade jackson-module-jaxb-annotationsUpgrade opendnssecUpgrade python3-ipaserverNo solution existsUpgrade slapi-nisUpgrade resteasyUpgrade jss-javadocUpgrade python3-pkiUpgrade xml-commons-resolverUpgrade glassfish-jaxb-coreUpgrade softhsm-develUpgrade slapi-nis-debugsourceUpgrade ipa-debugsourceUpgrade pki-base-javaUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade ldapjdk-javadocUpgrade pki-core-debugsourceUpgrade xerces-j2Upgrade opendnssec-debuginfoUpgrade velocityUpgrade slf4j-jdk14Upgrade pki-toolsUpgrade javassist-javadocUpgrade ipa-client-debuginfoUpgrade pki-kraUpgrade javassistUpgrade bea-stax-apiUpgrade ipa-selinuxUpgrade softhsm-debuginfoUpgrade python3-jwcryptoUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-servlet-4.0-apiUpgrade apache-commons-collectionsUpgrade xalan-j2Upgrade bind-dyndb-ldapUpgrade slf4jUpgrade python3-nssUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-nss-debuginfoUpgrade jss-debugsourceUpgrade python3-kdcproxyUpgrade custodiaUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-ad-debuginfoUpgrade xsomUpgrade ipa-server-dnsUpgrade jss-debuginfoUpgrade pki-serverUpgrade ipa-client-epnUpgrade python3-qrcodeUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-txw2Upgrade jackson-annotationsUpgrade pki-caUpgrade relaxngDatatypeUpgrade jssUpgrade python-nss-docUpgrade apache-commons-netUpgrade python3-ipaclientUpgrade ipa-client-commonUpgrade python-nss-debugsourceUpgrade softhsm-debugsourceUpgrade python3-pyusbUpgrade pki-symkey | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub