In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-yubicoUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade python3-qrcode | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaclientUpgrade python2-ipalibUpgrade ipa-clientUpgrade ipa-python-compatUpgrade ipa-commonUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-server-dns | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade bind-dyndb-ldapUpgrade pki-toolsUpgrade jackson-module-jaxb-annotationsUpgrade python3-yubicoUpgrade ipa-selinuxUpgrade python3-jwcryptoUpgrade ipa-client-epnUpgrade resteasyUpgrade jackson-jaxrs-providersUpgrade pki-kraUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-ipaclientUpgrade xsomUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade slapi-nis-debuginfoUpgrade jss-debugsourceUpgrade softhsm-develUpgrade pki-serverUpgrade ipa-commonUpgrade python3-nss-debuginfoUpgrade python3-pkiUpgrade softhsm-debuginfoUpgrade apache-commons-langUpgrade jackson-jaxrs-json-providerUpgrade stax-exUpgrade xalan-j2Upgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debuginfoUpgrade slf4jUpgrade ipa-healthcheckUpgrade pki-servlet-engineUpgrade tomcatjssUpgrade slapi-nis-debugsourceUpgrade opendnssecUpgrade ipa-clientUpgrade ipa-serverUpgrade xml-commons-apisUpgrade pki-caUpgrade jackson-databindUpgrade jackson-annotationsUpgrade ipa-server-trust-ad-debuginfoUpgrade python-nss-debugsourceUpgrade pki-symkey-debuginfoUpgrade ipa-debuginfoUpgrade python2-ipaserverUpgrade jss-javadocUpgrade python3-ipaserverUpgrade apache-commons-netUpgrade relaxngDatatypeUpgrade pki-base-javaUpgrade glassfish-fastinfosetUpgrade jakarta-commons-httpclientUpgrade ipa-server-dnsUpgrade opendnssec-debuginfoUpgrade xerces-j2Upgrade ipa-python-compatUpgrade xmlstreambufferUpgrade glassfish-jaxb-apiUpgrade ipa-client-debuginfoUpgrade ipa-server-trust-adUpgrade pki-baseUpgrade velocityUpgrade python3-qrcode-coreUpgrade glassfish-jaxb-txw2Upgrade python3-custodiaUpgrade ipa-healthcheck-coreUpgrade custodiaUpgrade pki-core-debugsourceUpgrade softhsm-debugsourceUpgrade javassist-javadocUpgrade python3-pyusbUpgrade python3-nssUpgrade apache-commons-collectionsUpgrade slapi-nisUpgrade bea-stax-apiUpgrade python2-ipaclientUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade softhsmUpgrade jss-debuginfoUpgrade python3-ipalibUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-runtimeUpgrade python3-qrcodeUpgrade javassistUpgrade ldapjdk-javadocUpgrade pki-tools-debuginfoUpgrade pki-symkeyUpgrade python2-ipalibUpgrade pki-core-debuginfoUpgrade jssUpgrade pki-servlet-4.0-apiUpgrade python-nss-docUpgrade python3-kdcproxyUpgrade ipa-server-commonUpgrade ldapjdkUpgrade xml-commons-resolverUpgrade ipa-server-debuginfoUpgrade ipa-debugsource | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Feb 19, 2019 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 18, 2021 |
| Oracle_linux | — | Upgrade pki-servlet-engineUpgrade custodiaUpgrade glassfish-jaxb-txw2Upgrade ipa-client-commonUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade ipa-server-trust-adUpgrade jakarta-commons-httpclientUpgrade python3-qrcodeUpgrade jackson-jaxrs-providersUpgrade slapi-nisUpgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheck-coreUpgrade python2-ipaclientUpgrade xml-commons-resolverUpgrade ipa-server-dnsUpgrade jackson-databindUpgrade javassistUpgrade stax-exUpgrade python-nss-docUpgrade velocityUpgrade apache-commons-collectionsUpgrade pki-symkeyUpgrade xmlstreambufferUpgrade xerces-j2Upgrade ldapjdk-javadocUpgrade slf4j-jdk14Upgrade python3-custodiaUpgrade ldapjdkUpgrade pki-baseUpgrade python2-ipalibUpgrade python3-nssUpgrade jssUpgrade python3-ipalibUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade glassfish-jaxb-coreUpgrade opendnssecUpgrade ipa-server-commonUpgrade pki-caUpgrade python3-pkiUpgrade apache-commons-netUpgrade python3-jwcryptoUpgrade tomcatjssUpgrade jackson-module-jaxb-annotationsUpgrade bind-dyndb-ldapUpgrade xml-commons-apisUpgrade glassfish-fastinfosetUpgrade jackson-coreUpgrade ipa-client-epnUpgrade jss-javadocUpgrade xalan-j2Upgrade python2-ipaserverUpgrade javassist-javadocUpgrade ipa-commonUpgrade slf4jUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade ipa-client-sambaUpgrade ipa-serverUpgrade python3-qrcode-coreUpgrade pki-servlet-4.0-apiUpgrade python3-yubicoUpgrade ipa-clientUpgrade pki-toolsUpgrade pki-base-javaUpgrade python3-ipaclientUpgrade apache-commons-langUpgrade pki-serverUpgrade xsomUpgrade python3-ipaserverUpgrade pki-kraUpgrade softhsm-develUpgrade softhsmUpgrade ipa-selinuxUpgrade resteasyUpgrade jackson-jaxrs-json-providerUpgrade ipa-healthcheckUpgrade ipa-python-compat | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade bea-stax-apiUpgrade ipa-healthcheckUpgrade python3-custodiaUpgrade python3-ipalibUpgrade slf4j-jdk14Upgrade xml-commons-resolverUpgrade jackson-coreUpgrade python2-ipaserverUpgrade opendnssecUpgrade tomcatjssUpgrade ipa-server-debuginfoUpgrade slapi-nis-debuginfoUpgrade pki-base-javaUpgrade python2-ipaclientUpgrade xml-commons-apisUpgrade python2-ipalibUpgrade velocityUpgrade pki-symkey-debuginfoUpgrade ipa-serverUpgrade jss-javadocUpgrade ipa-selinuxUpgrade softhsmUpgrade stax-exUpgrade glassfish-jaxb-apiUpgrade ipa-server-trust-adUpgrade pki-core-debugsourceUpgrade jackson-jaxrs-providersUpgrade ipa-clientUpgrade resteasyUpgrade softhsm-develNo solution existsUpgrade ldapjdk-javadocUpgrade pki-servlet-engineUpgrade ipa-commonUpgrade python3-qrcode-coreUpgrade python3-ipaserverUpgrade xmlstreambufferUpgrade glassfish-fastinfosetUpgrade pki-core-debuginfoUpgrade ipa-python-compatUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-runtimeUpgrade python3-pkiUpgrade jackson-module-jaxb-annotationsUpgrade opendnssec-debuginfoUpgrade xerces-j2Upgrade slapi-nisUpgrade pki-baseUpgrade jackson-databindUpgrade apache-commons-langUpgrade jackson-jaxrs-json-providerUpgrade slapi-nis-debugsourceUpgrade ipa-debuginfoUpgrade pki-tools-debuginfoUpgrade python3-yubicoUpgrade opendnssec-debugsourceUpgrade ldapjdkUpgrade ipa-debugsourceUpgrade ipa-client-epnUpgrade glassfish-jaxb-txw2Upgrade python-nss-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-kraUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-caUpgrade python3-kdcproxyUpgrade slf4jUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade jssUpgrade jakarta-commons-httpclientUpgrade softhsm-debuginfoUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade xalan-j2Upgrade ipa-healthcheck-coreUpgrade xsomUpgrade pki-servlet-4.0-apiUpgrade ipa-client-sambaUpgrade apache-commons-collectionsUpgrade python3-ipaclientUpgrade pki-toolsUpgrade ipa-client-commonUpgrade jss-debuginfoUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade softhsm-debugsourceUpgrade jackson-annotationsUpgrade pki-serverUpgrade javassistUpgrade python3-pyusbUpgrade pki-symkeyUpgrade python3-nssUpgrade python-nss-docUpgrade apache-commons-netUpgrade javassist-javadocUpgrade jss-debugsourceUpgrade custodiaUpgrade relaxngDatatypeUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldap | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python3-nssUpgrade python-nss-debugsourceUpgrade python-nss-doc | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub