In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-yubicoUpgrade custodiaUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade python3-jwcrypto | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-commonUpgrade ipa-clientUpgrade python2-ipaserverUpgrade python2-ipaclientUpgrade ipa-client-commonUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade ipa-server-dns | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade jackson-databindUpgrade slapi-nis-debugsourceUpgrade ipa-commonUpgrade python3-custodiaUpgrade velocityUpgrade ipa-server-debuginfoUpgrade python3-ipalibUpgrade resteasyUpgrade ldapjdkUpgrade slapi-nisUpgrade opendnssecUpgrade jakarta-commons-httpclientUpgrade ipa-serverUpgrade javassistUpgrade xerces-j2Upgrade python3-pkiUpgrade jackson-jaxrs-providersUpgrade xmlstreambufferUpgrade python3-qrcode-coreUpgrade stax-exUpgrade pki-symkey-debuginfoUpgrade ipa-clientUpgrade xml-commons-apisUpgrade bea-stax-apiUpgrade ipa-debuginfoUpgrade tomcatjssUpgrade glassfish-fastinfosetUpgrade softhsm-debugsourceUpgrade softhsm-develUpgrade pki-base-javaUpgrade python2-ipalibUpgrade apache-commons-langUpgrade pki-tools-debuginfoUpgrade python3-nssUpgrade slf4j-jdk14Upgrade slapi-nis-debuginfoUpgrade python3-yubicoUpgrade ldapjdk-javadocUpgrade ipa-debugsourceUpgrade jss-javadocUpgrade opendnssec-debuginfoUpgrade ipa-server-trust-adUpgrade python3-kdcproxyUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade softhsmUpgrade pki-servlet-engineUpgrade pki-baseUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade pki-symkeyUpgrade softhsm-debuginfoUpgrade opendnssec-debugsourceUpgrade ipa-client-epnUpgrade python3-ipaclientUpgrade bind-dyndb-ldapUpgrade ipa-server-dnsUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-pyusbUpgrade jackson-module-jaxb-annotationsUpgrade pki-servlet-4.0-apiUpgrade javassist-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade python2-ipaserverUpgrade python-nss-debugsourceUpgrade apache-commons-netUpgrade pki-core-debugsourceUpgrade apache-commons-collectionsUpgrade ipa-selinuxUpgrade pki-caUpgrade glassfish-jaxb-coreUpgrade xml-commons-resolverUpgrade ipa-healthcheck-coreUpgrade slf4jUpgrade pki-serverUpgrade pki-core-debuginfoUpgrade ipa-server-commonUpgrade glassfish-jaxb-runtimeUpgrade custodiaUpgrade ipa-healthcheckUpgrade jss-debugsourceUpgrade python-nss-docUpgrade jssUpgrade pki-kraUpgrade ipa-client-debuginfoUpgrade python3-ipaserverUpgrade xalan-j2Upgrade python3-qrcodeUpgrade jss-debuginfoUpgrade ipa-client-sambaUpgrade ipa-client-commonUpgrade pki-toolsUpgrade xsomUpgrade python3-jwcryptoUpgrade jackson-coreUpgrade glassfish-jaxb-txw2Upgrade python3-nss-debuginfo | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 19, 2021 |
| Oracle_linux | — | Upgrade ipa-python-compatUpgrade velocityUpgrade glassfish-jaxb-apiUpgrade pki-caUpgrade ipa-server-dnsUpgrade pki-symkeyUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade pki-servlet-engineUpgrade jakarta-commons-httpclientUpgrade python3-custodiaUpgrade softhsmUpgrade apache-commons-collectionsUpgrade ipa-client-commonUpgrade ipa-client-sambaUpgrade javassist-javadocUpgrade opendnssecUpgrade xalan-j2Upgrade jssUpgrade python-nss-docUpgrade python3-qrcode-coreUpgrade slf4jUpgrade javassistUpgrade python3-kdcproxyUpgrade python3-ipaclientUpgrade glassfish-fastinfosetUpgrade python3-pyusbUpgrade python3-nssUpgrade relaxngDatatypeUpgrade glassfish-jaxb-coreUpgrade ipa-client-epnUpgrade pki-toolsUpgrade jackson-annotationsUpgrade ldapjdk-javadocUpgrade stax-exUpgrade xsomUpgrade python2-ipalibUpgrade bind-dyndb-ldapUpgrade xml-commons-apisUpgrade apache-commons-langUpgrade ldapjdkUpgrade xml-commons-resolverUpgrade ipa-serverUpgrade custodiaUpgrade python3-ipaserverUpgrade jackson-coreUpgrade tomcatjssUpgrade pki-serverUpgrade jss-javadocUpgrade python3-ipalibUpgrade glassfish-jaxb-runtimeUpgrade python3-pkiUpgrade apache-commons-netUpgrade ipa-healthcheckUpgrade slapi-nisUpgrade pki-kraUpgrade xmlstreambufferUpgrade pki-base-javaUpgrade xerces-j2Upgrade ipa-server-trust-adUpgrade jackson-jaxrs-json-providerUpgrade ipa-clientUpgrade python2-ipaserverUpgrade jackson-jaxrs-providersUpgrade softhsm-develUpgrade pki-servlet-4.0-apiUpgrade jackson-databindUpgrade bea-stax-apiUpgrade glassfish-jaxb-txw2Upgrade resteasyUpgrade slf4j-jdk14Upgrade ipa-commonUpgrade python3-jwcryptoUpgrade ipa-selinuxUpgrade jackson-module-jaxb-annotationsUpgrade python3-yubicoUpgrade pki-baseUpgrade ipa-server-commonUpgrade python2-ipaclient | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade pki-kraUpgrade bind-dyndb-ldapUpgrade bind-dyndb-ldap-debuginfoUpgrade xsomUpgrade xalan-j2Upgrade pki-servlet-4.0-apiUpgrade python3-ipaclientUpgrade slf4jUpgrade ipa-client-sambaUpgrade jackson-jaxrs-providersUpgrade slapi-nisUpgrade ldapjdkUpgrade apache-commons-langUpgrade apache-commons-collectionsUpgrade jackson-jaxrs-json-providerUpgrade stax-exUpgrade pki-tools-debuginfoUpgrade python3-ipalibUpgrade custodiaUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade pki-symkeyUpgrade ipa-server-trust-ad-debuginfoUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheck-coreUpgrade python2-ipaclientUpgrade ipa-client-debuginfoUpgrade softhsm-develUpgrade ipa-debugsourceUpgrade tomcatjssUpgrade xerces-j2Upgrade python3-nssUpgrade ipa-commonUpgrade softhsm-debugsourceUpgrade pki-core-debuginfoUpgrade ipa-server-trust-adUpgrade pki-serverUpgrade bind-dyndb-ldap-debugsourceUpgrade apache-commons-netUpgrade pki-toolsUpgrade velocityUpgrade pki-servlet-engineUpgrade opendnssec-debuginfoUpgrade pki-core-debugsourceUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-healthcheckUpgrade jss-javadocUpgrade xml-commons-resolverUpgrade ipa-clientUpgrade ipa-python-compatUpgrade ipa-server-debuginfoUpgrade bea-stax-apiUpgrade slf4j-jdk14No solution existsUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-apiUpgrade opendnssecUpgrade resteasyUpgrade jackson-databindUpgrade xmlstreambufferUpgrade ipa-serverUpgrade opendnssec-debugsourceUpgrade slapi-nis-debuginfoUpgrade jackson-coreUpgrade pki-baseUpgrade python3-pkiUpgrade python3-yubicoUpgrade python2-ipaserverUpgrade xml-commons-apisUpgrade jackson-annotationsUpgrade ldapjdk-javadocUpgrade python3-qrcode-coreUpgrade javassist-javadoc | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-doc | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub