In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-pyusbUpgrade python3-yubicoUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade custodiaUpgrade python3-jwcryptoUpgrade python3-kdcproxyUpgrade python3-qrcode | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade ipa-client | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade ipa-healthcheck-coreUpgrade ipa-server-dnsUpgrade python3-jwcryptoUpgrade apache-commons-netUpgrade slf4jUpgrade python3-ipaserverUpgrade pki-toolsUpgrade pki-serverUpgrade pki-core-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade javassist-javadocUpgrade python3-qrcodeUpgrade ipa-healthcheckUpgrade pki-kraUpgrade pki-core-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade opendnssec-debugsourceUpgrade jackson-coreUpgrade ipa-client-commonUpgrade apache-commons-collectionsUpgrade python-nss-debugsourceUpgrade relaxngDatatypeUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-servlet-4.0-apiUpgrade jackson-module-jaxb-annotationsUpgrade ipa-server-trust-ad-debuginfoUpgrade python2-ipaserverUpgrade jss-debugsourceUpgrade custodiaUpgrade ipa-client-epnUpgrade python3-pyusbUpgrade ipa-client-sambaUpgrade softhsm-debuginfoUpgrade jackson-annotationsUpgrade ipa-server-commonUpgrade python3-ipaclientUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-client-debuginfoUpgrade ipa-selinuxUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade python-nss-docUpgrade glassfish-jaxb-coreUpgrade pki-caUpgrade xml-commons-resolverUpgrade jssUpgrade jss-debuginfoUpgrade pki-symkeyUpgrade xsomUpgrade slapi-nis-debugsourceUpgrade ipa-python-compatUpgrade jackson-databindUpgrade ldapjdkUpgrade ipa-server-debuginfoUpgrade softhsmUpgrade ipa-clientUpgrade pki-base-javaUpgrade ipa-server-trust-adUpgrade python3-nssUpgrade opendnssecUpgrade xerces-j2Upgrade jackson-jaxrs-json-providerUpgrade python3-pkiUpgrade velocityUpgrade ipa-serverUpgrade jackson-jaxrs-providersUpgrade xmlstreambufferUpgrade stax-exUpgrade resteasyUpgrade slf4j-jdk14Upgrade ipa-commonUpgrade ipa-debugsourceUpgrade python3-ipalibUpgrade pki-servlet-engineUpgrade opendnssec-debuginfoUpgrade jakarta-commons-httpclientUpgrade glassfish-fastinfosetUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade slapi-nisUpgrade python2-ipalibUpgrade softhsm-develUpgrade pki-tools-debuginfoUpgrade apache-commons-langUpgrade bea-stax-apiUpgrade pki-symkey-debuginfoUpgrade python3-yubicoUpgrade xml-commons-apisUpgrade javassistUpgrade softhsm-debugsourceUpgrade slapi-nis-debuginfoUpgrade python2-ipaclientUpgrade ldapjdk-javadocUpgrade jss-javadocUpgrade pki-baseUpgrade glassfish-jaxb-apiUpgrade ipa-debuginfoUpgrade tomcatjss | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 19, 2021 |
| Oracle_linux | — | Upgrade jakarta-commons-httpclientUpgrade python3-nssUpgrade pki-toolsUpgrade apache-commons-collectionsUpgrade ipa-client-commonUpgrade python3-pyusbUpgrade stax-exUpgrade python2-ipalibUpgrade ldapjdk-javadocUpgrade opendnssecUpgrade xsomUpgrade ipa-client-epnUpgrade glassfish-fastinfosetUpgrade javassistUpgrade python3-kdcproxyUpgrade softhsmUpgrade glassfish-jaxb-coreUpgrade python3-qrcodeUpgrade slf4jUpgrade pki-caUpgrade javassist-javadocUpgrade relaxngDatatypeUpgrade ipa-client-sambaUpgrade xalan-j2Upgrade python3-qrcode-coreUpgrade python3-ipaclientUpgrade pki-symkeyUpgrade glassfish-jaxb-apiUpgrade python-nss-docUpgrade jssUpgrade bind-dyndb-ldapUpgrade ipa-healthcheck-coreUpgrade pki-servlet-engineUpgrade velocityUpgrade ipa-python-compatUpgrade jackson-annotationsUpgrade ipa-server-dnsUpgrade python3-custodiaUpgrade xerces-j2Upgrade glassfish-jaxb-txw2Upgrade slapi-nisUpgrade pki-kraUpgrade pki-base-javaUpgrade custodiaUpgrade xml-commons-resolverUpgrade bea-stax-apiUpgrade apache-commons-netUpgrade python3-pkiUpgrade python2-ipaserverUpgrade pki-servlet-4.0-apiUpgrade jackson-databindUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade python3-ipalibUpgrade jss-javadocUpgrade ipa-selinuxUpgrade python3-jwcryptoUpgrade jackson-jaxrs-json-providerUpgrade python2-ipaclientUpgrade ipa-clientUpgrade tomcatjssUpgrade pki-baseUpgrade softhsm-develUpgrade python3-ipaserverUpgrade ipa-serverUpgrade pki-serverUpgrade resteasyUpgrade python3-yubicoUpgrade jackson-coreUpgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheckUpgrade apache-commons-langUpgrade ipa-server-commonUpgrade ldapjdkUpgrade xml-commons-apisUpgrade ipa-commonUpgrade jackson-module-jaxb-annotationsUpgrade xmlstreambufferUpgrade ipa-server-trust-ad | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade pki-kraUpgrade bind-dyndb-ldapUpgrade pki-serverUpgrade python2-ipalibUpgrade pki-servlet-4.0-apiUpgrade pki-toolsUpgrade slapi-nis-debugsourceUpgrade python-nss-debugsourceUpgrade python3-custodiaUpgrade glassfish-fastinfosetUpgrade softhsm-debuginfoUpgrade jss-debuginfoUpgrade python3-qrcodeUpgrade jss-debugsourceUpgrade ipa-client-epnUpgrade jakarta-commons-httpclientUpgrade ipa-selinuxUpgrade ipa-server-commonUpgrade softhsmUpgrade xml-commons-apisUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade bind-dyndb-ldap-debugsourceUpgrade python-nss-docUpgrade javassist-javadocUpgrade apache-commons-netUpgrade ipa-server-dnsUpgrade python3-qrcode-coreUpgrade xsomUpgrade xalan-j2Upgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipaclientUpgrade javassistUpgrade python3-jwcryptoUpgrade pki-base-javaUpgrade relaxngDatatypeUpgrade pki-caUpgrade python3-nss-debuginfoUpgrade pki-symkey-debuginfoUpgrade jssUpgrade ipa-client-sambaUpgrade slf4jUpgrade ldapjdk-javadocUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ipa-healthcheck-coreUpgrade tomcatjssUpgrade glassfish-jaxb-txw2Upgrade ipa-client-debuginfoUpgrade pki-servlet-engineUpgrade pki-tools-debuginfoUpgrade xmlstreambufferUpgrade python2-ipaserverUpgrade resteasyUpgrade slapi-nis-debuginfo | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfo | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub