In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade custodiaUpgrade python3-pyusbUpgrade python3-yubicoUpgrade python3-kdcproxyUpgrade python3-custodia | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-python-compatUpgrade ipa-clientUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade ipa-serverUpgrade python2-ipaserverUpgrade ipa-server-dns | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade jssUpgrade jakarta-commons-httpclientUpgrade ipa-server-dnsUpgrade python-nss-docUpgrade ldapjdkUpgrade pki-core-debugsourceUpgrade python3-ipalibUpgrade slapi-nisUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade python3-qrcode-coreUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade softhsmUpgrade jss-debuginfoUpgrade softhsm-debugsourceUpgrade python2-ipalibUpgrade ipa-server-trust-adUpgrade ipa-client-debuginfoUpgrade xmlstreambufferUpgrade glassfish-jaxb-apiUpgrade ldapjdk-javadocUpgrade python3-pyusbUpgrade python3-nssUpgrade ipa-debugsourceUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade bea-stax-apiUpgrade ipa-python-compatUpgrade opendnssec-debugsourceUpgrade ipa-server-commonUpgrade python2-ipaclientUpgrade ipa-server-debuginfoUpgrade pki-core-debuginfoUpgrade opendnssec-debuginfoUpgrade custodiaUpgrade python3-kdcproxyUpgrade velocityUpgrade pki-symkeyUpgrade pki-baseUpgrade glassfish-jaxb-txw2Upgrade javassistUpgrade python3-qrcodeUpgrade python3-custodiaUpgrade slapi-nis-debuginfoUpgrade pki-base-javaUpgrade ipa-selinuxUpgrade python2-ipaserverUpgrade ipa-clientUpgrade jss-javadocUpgrade pki-servlet-engineUpgrade ipa-healthcheckUpgrade apache-commons-netUpgrade pki-symkey-debuginfoUpgrade jackson-databindUpgrade slf4j-jdk14Upgrade python-nss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade xsomUpgrade bind-dyndb-ldapUpgrade bind-dyndb-ldap-debugsourceUpgrade tomcatjssUpgrade slapi-nis-debugsourceUpgrade slf4jUpgrade jackson-coreUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade jackson-jaxrs-providersUpgrade ipa-client-epnUpgrade resteasyUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade opendnssecUpgrade pki-kraUpgrade python3-ipaclientUpgrade pki-caUpgrade ipa-client-sambaUpgrade stax-exUpgrade python3-pkiUpgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade ipa-commonUpgrade softhsm-develUpgrade pki-serverUpgrade bind-dyndb-ldap-debuginfoUpgrade softhsm-debuginfoUpgrade glassfish-fastinfosetUpgrade xalan-j2Upgrade python3-jwcryptoUpgrade apache-commons-langUpgrade python3-ipaserverUpgrade pki-toolsUpgrade python3-yubicoUpgrade xml-commons-apisUpgrade ipa-server-trust-ad-debuginfo | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Feb 19, 2019 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 18, 2021 |
| Oracle_linux | — | Upgrade jackson-module-jaxb-annotationsUpgrade javassist-javadocUpgrade xalan-j2Upgrade python3-pkiUpgrade softhsm-develUpgrade python3-yubicoUpgrade ipa-client-epnUpgrade xml-commons-apisUpgrade jss-javadocUpgrade bind-dyndb-ldapUpgrade glassfish-fastinfosetUpgrade apache-commons-netUpgrade apache-commons-langUpgrade jackson-coreUpgrade opendnssecUpgrade ipa-healthcheckUpgrade resteasyUpgrade pki-base-javaUpgrade python3-ipaclientUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade jackson-jaxrs-json-providerUpgrade python3-ipaserverUpgrade pki-servlet-4.0-apiUpgrade tomcatjssUpgrade python3-jwcryptoUpgrade pki-caUpgrade xsomUpgrade pki-kraUpgrade slf4jUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade ipa-serverUpgrade ipa-clientUpgrade pki-toolsUpgrade pki-serverUpgrade softhsmUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade ipa-commonUpgrade python3-qrcode-coreUpgrade python2-ipaserverUpgrade python3-qrcodeUpgrade glassfish-jaxb-runtimeUpgrade javassistUpgrade xml-commons-resolverUpgrade jackson-jaxrs-providersUpgrade jakarta-commons-httpclientUpgrade python3-pyusbUpgrade jssUpgrade python2-ipalibUpgrade stax-exUpgrade glassfish-jaxb-apiUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade apache-commons-collectionsUpgrade ipa-server-dnsUpgrade python3-nssUpgrade glassfish-jaxb-coreUpgrade python-nss-docUpgrade jackson-databindUpgrade ipa-server-trust-adUpgrade xerces-j2Upgrade custodiaUpgrade bea-stax-apiUpgrade slapi-nisUpgrade velocityUpgrade python3-kdcproxyUpgrade glassfish-jaxb-txw2Upgrade python3-ipalibUpgrade python2-ipaclientUpgrade pki-baseUpgrade xmlstreambufferUpgrade python3-custodiaUpgrade ldapjdkUpgrade ldapjdk-javadocUpgrade slf4j-jdk14Upgrade pki-servlet-engineUpgrade pki-symkey | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade python3-pkiUpgrade python3-yubicoUpgrade python3-custodiaUpgrade pki-core-debugsourceUpgrade ipa-python-compatUpgrade jackson-jaxrs-providersUpgrade ipa-selinuxUpgrade python3-ipalibUpgrade ipa-server-debuginfoUpgrade softhsm-develUpgrade ipa-serverUpgrade pki-baseUpgrade pki-symkey-debuginfoUpgrade velocityUpgrade slapi-nis-debugsourceUpgrade pki-servlet-engineUpgrade ldapjdk-javadocUpgrade xml-commons-apisUpgrade slapi-nisUpgrade jackson-module-jaxb-annotationsUpgrade tomcatjssUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade opendnssecUpgrade slf4j-jdk14Upgrade ipa-debugsourceUpgrade opendnssec-debugsourceUpgrade stax-exUpgrade ipa-clientUpgrade pki-tools-debuginfoUpgrade pki-core-debuginfoUpgrade python3-ipaserverUpgrade ipa-healthcheckUpgrade jss-javadocUpgrade xerces-j2Upgrade bea-stax-apiUpgrade pki-base-javaUpgrade resteasyUpgrade ldapjdkUpgrade ipa-debuginfoUpgrade xml-commons-resolverUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade python3-qrcode-coreUpgrade softhsmUpgrade jackson-coreUpgrade jackson-databindUpgrade python2-ipalibUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-coreUpgrade slapi-nis-debuginfoUpgrade opendnssec-debuginfoUpgrade glassfish-jaxb-apiUpgrade apache-commons-langUpgrade python3-nss-debuginfoUpgrade pki-caUpgrade relaxngDatatypeUpgrade pki-serverUpgrade python3-qrcodeUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipaclientUpgrade glassfish-jaxb-txw2Upgrade pki-kraUpgrade ipa-server-dnsUpgrade bind-dyndb-ldapUpgrade python-nss-debugsourceUpgrade softhsm-debuginfoUpgrade javassist-javadocUpgrade jss-debuginfoUpgrade jakarta-commons-httpclientUpgrade jackson-annotationsUpgrade pki-symkeyUpgrade ipa-healthcheck-coreUpgrade python3-kdcproxyUpgrade ipa-client-debuginfoUpgrade ipa-client-sambaUpgrade apache-commons-collectionsUpgrade xsomUpgrade pki-servlet-4.0-apiUpgrade apache-commons-netUpgrade slf4jUpgrade bind-dyndb-ldap-debugsourceUpgrade xalan-j2Upgrade javassistUpgrade jss-debugsourceUpgrade ipa-client-commonUpgrade ipa-server-trust-ad-debuginfoUpgrade jssUpgrade pki-toolsUpgrade ipa-server-commonUpgrade python3-nssUpgrade custodiaUpgrade python-nss-docUpgrade softhsm-debugsourceUpgrade python3-jwcryptoUpgrade python3-pyusbNo solution existsUpgrade ipa-commonUpgrade python2-ipaserver | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub