In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-custodiaUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade custodiaUpgrade python3-yubicoUpgrade python3-kdcproxyUpgrade python3-pyusb | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaclientUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade ipa-commonUpgrade ipa-clientUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-server-trust-ad | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade ipa-healthcheckUpgrade ipa-server-commonUpgrade python-nss-debugsourceUpgrade jss-debugsourceUpgrade jss-javadocUpgrade apache-commons-langUpgrade ipa-clientUpgrade pki-base-javaUpgrade python3-pkiUpgrade ipa-commonUpgrade pki-kraUpgrade xalan-j2Upgrade glassfish-fastinfosetUpgrade opendnssecUpgrade ipa-client-epnUpgrade javassist-javadocUpgrade resteasyUpgrade ipa-client-sambaUpgrade jackson-module-jaxb-annotationsUpgrade jackson-coreUpgrade ipa-selinuxUpgrade pki-caUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade bind-dyndb-ldapUpgrade relaxngDatatypeUpgrade pki-toolsUpgrade xml-commons-apisUpgrade xsomUpgrade apache-commons-netUpgrade pki-servlet-4.0-apiUpgrade slapi-nis-debuginfoUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade ipa-client-debuginfoUpgrade ipa-serverUpgrade bind-dyndb-ldap-debuginfoUpgrade ldapjdk-javadocUpgrade ipa-python-compatUpgrade jackson-annotationsUpgrade slf4jUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-ipaclientUpgrade tomcatjssUpgrade pki-serverUpgrade pki-symkey-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade opendnssec-debugsourceUpgrade python3-qrcodeUpgrade python3-ipalibUpgrade bea-stax-apiUpgrade ipa-debugsourceUpgrade jss-debuginfoUpgrade jackson-jaxrs-providersUpgrade pki-symkeyUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade python2-ipaserverUpgrade softhsm-debuginfoUpgrade slapi-nis-debugsourceUpgrade ldapjdkUpgrade ipa-healthcheck-coreUpgrade python3-pyusbUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nisUpgrade custodiaUpgrade ipa-client-commonUpgrade pki-core-debugsourceUpgrade python3-kdcproxyUpgrade javassistUpgrade slf4j-jdk14Upgrade xerces-j2Upgrade pki-baseUpgrade stax-exUpgrade jackson-databindUpgrade softhsmUpgrade jssUpgrade jakarta-commons-httpclientUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade python3-custodiaUpgrade python3-nssUpgrade python-nss-docUpgrade python2-ipalibUpgrade velocityUpgrade pki-tools-debuginfoUpgrade ipa-server-debuginfoUpgrade apache-commons-collectionsUpgrade softhsm-debugsourceUpgrade glassfish-jaxb-apiUpgrade pki-core-debuginfoUpgrade pki-servlet-engineUpgrade xml-commons-resolverUpgrade python2-ipaclientUpgrade opendnssec-debuginfoUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-coreUpgrade python3-yubico | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap3Upgrade twitter-bootstrap4 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php73Upgrade mantis-php74Upgrade mantis-php71Upgrade mantis-php72 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade ipa-server-dnsUpgrade custodiaUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade ipa-healthcheckUpgrade relaxngDatatypeUpgrade jackson-module-jaxb-annotationsUpgrade python2-ipalibUpgrade python2-ipaserverUpgrade ipa-client-epnUpgrade jackson-annotationsUpgrade ipa-client-sambaUpgrade pki-base-javaUpgrade jackson-coreUpgrade apache-commons-netUpgrade pki-serverUpgrade slf4jUpgrade python3-pkiUpgrade ipa-server-commonUpgrade pki-kraUpgrade javassist-javadocUpgrade python3-ipaclientUpgrade ipa-commonUpgrade opendnssecUpgrade resteasyUpgrade ipa-client-commonUpgrade pki-caUpgrade ipa-clientUpgrade pki-servlet-4.0-apiUpgrade xsomUpgrade softhsm-develUpgrade jss-javadocUpgrade python3-ipaserverUpgrade python3-qrcode-coreUpgrade softhsmUpgrade python3-jwcryptoUpgrade pki-toolsUpgrade bind-dyndb-ldapUpgrade tomcatjssUpgrade jakarta-commons-httpclientUpgrade xml-commons-apisUpgrade glassfish-fastinfosetUpgrade apache-commons-langUpgrade ipa-python-compatUpgrade velocityUpgrade python3-pyusbUpgrade ldapjdkUpgrade ipa-server-trust-adUpgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheck-coreUpgrade pki-symkeyUpgrade jackson-jaxrs-providersUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade pki-servlet-engineUpgrade pki-baseUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade python-nss-docUpgrade python2-ipaclientUpgrade ipa-selinuxUpgrade python3-qrcodeUpgrade python3-nssUpgrade python3-kdcproxyUpgrade ipa-serverUpgrade slapi-nisUpgrade python3-yubicoUpgrade xmlstreambufferUpgrade python3-ipalibUpgrade jssUpgrade javassistUpgrade stax-exUpgrade python3-custodiaUpgrade xml-commons-resolverUpgrade bea-stax-apiUpgrade jackson-databindUpgrade xerces-j2Upgrade slf4j-jdk14 | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade pki-core-debugsourceUpgrade pki-symkeyUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade python3-kdcproxyUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade jackson-coreUpgrade jss-debugsourceUpgrade pki-toolsUpgrade xsomUpgrade jss-debuginfoUpgrade python3-nssUpgrade python3-pyusbUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-netUpgrade glassfish-jaxb-txw2Upgrade softhsm-debugsourceUpgrade pki-servlet-4.0-apiUpgrade ipa-selinuxUpgrade custodiaUpgrade python-nss-debugsourceUpgrade python2-ipaserverUpgrade pki-caUpgrade ipa-server-dnsUpgrade relaxngDatatypeUpgrade python3-nss-debuginfoUpgrade ipa-debugsourceUpgrade slf4jUpgrade pki-core-debuginfoUpgrade opendnssec-debugsourceUpgrade python-nss-docUpgrade ipa-server-trust-ad-debuginfoUpgrade softhsm-debuginfoUpgrade jssUpgrade xml-commons-resolverUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-ipaclientUpgrade ipa-client-epnUpgrade bind-dyndb-ldapUpgrade xalan-j2Upgrade python3-pkiUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-server-debuginfoUpgrade velocityUpgrade python3-custodiaUpgrade xmlstreambufferUpgrade softhsm-develUpgrade python2-ipalibUpgrade python3-ipalibUpgrade resteasyUpgrade ldapjdkUpgrade ldapjdk-javadocUpgrade jakarta-commons-httpclientUpgrade python3-yubicoUpgrade pki-symkey-debuginfoUpgrade glassfish-fastinfosetUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-tools-debuginfoUpgrade python3-ipaserverUpgrade javassist-javadocUpgrade opendnssecUpgrade ipa-server-trust-adUpgrade python3-qrcode-coreUpgrade pki-servlet-engineUpgrade slapi-nis-debuginfoNo solution existsUpgrade tomcatjssUpgrade pki-base-javaUpgrade softhsmUpgrade pki-serverUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade xml-commons-apisUpgrade glassfish-jaxb-apiUpgrade ipa-debuginfoUpgrade jackson-module-jaxb-annotationsUpgrade slapi-nis-debugsourceUpgrade ipa-client-debuginfoUpgrade ipa-client-sambaUpgrade stax-exUpgrade ipa-server-commonUpgrade jss-javadocUpgrade slapi-nisUpgrade pki-kraUpgrade bea-stax-apiUpgrade apache-commons-langUpgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade ipa-healthcheckUpgrade jackson-annotationsUpgrade opendnssec-debuginfoUpgrade python3-jwcryptoUpgrade javassistUpgrade jackson-databindUpgrade ipa-client-commonUpgrade pki-baseUpgrade ipa-common | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-doc | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub