In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcryptoUpgrade python3-custodiaUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade custodiaUpgrade python3-yubico | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-commonUpgrade python2-ipaclientUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade ipa-client | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade python2-ipalibUpgrade apache-commons-collectionsUpgrade pki-core-debugsourceUpgrade softhsm-debugsourceUpgrade velocityUpgrade glassfish-jaxb-apiUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade javassistUpgrade python3-pyusbUpgrade slapi-nisUpgrade opendnssec-debugsourceUpgrade python3-yubicoUpgrade pki-tools-debuginfoUpgrade pki-servlet-engineUpgrade jackson-databindUpgrade glassfish-jaxb-txw2Upgrade python2-ipaclientUpgrade xml-commons-resolverUpgrade softhsmUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-custodiaUpgrade jssUpgrade jakarta-commons-httpclientUpgrade ipa-server-debuginfoUpgrade python3-nssUpgrade glassfish-jaxb-coreUpgrade slapi-nis-debugsourceUpgrade slf4j-jdk14Upgrade softhsm-debuginfoUpgrade pki-core-debuginfoUpgrade pki-baseUpgrade xerces-j2Upgrade python3-qrcodeUpgrade ipa-debugsourceUpgrade jss-debuginfoUpgrade python-nss-docUpgrade python2-ipaserverUpgrade python3-kdcproxyUpgrade pki-symkeyUpgrade ldapjdkUpgrade xmlstreambufferUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-runtimeUpgrade bea-stax-apiUpgrade stax-exUpgrade python3-ipalibUpgrade ipa-server-dnsUpgrade ipa-server-trust-adUpgrade opendnssec-debuginfoUpgrade custodiaUpgrade ipa-commonUpgrade ipa-client-epnUpgrade ipa-client-sambaUpgrade jss-javadocUpgrade python3-pkiUpgrade pki-kraUpgrade pki-base-javaUpgrade jss-debugsourceUpgrade ipa-server-commonUpgrade python-nss-debugsourceUpgrade ipa-healthcheckUpgrade tomcatjssUpgrade bind-dyndb-ldapUpgrade pki-toolsUpgrade python3-nss-debuginfoUpgrade resteasyUpgrade pki-symkey-debuginfoUpgrade python3-ipaclientUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade softhsm-develUpgrade opendnssecUpgrade ldapjdk-javadocUpgrade python3-jwcryptoUpgrade slapi-nis-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade apache-commons-langUpgrade javassist-javadocUpgrade pki-serverUpgrade xml-commons-apisUpgrade xsomUpgrade slf4jUpgrade relaxngDatatypeUpgrade python3-qrcode-coreUpgrade pki-servlet-4.0-apiUpgrade python3-ipaserverUpgrade apache-commons-netUpgrade ipa-python-compatUpgrade jackson-jaxrs-json-providerUpgrade glassfish-fastinfosetUpgrade xalan-j2Upgrade ipa-clientUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-selinuxUpgrade pki-caUpgrade jackson-core | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap4Upgrade twitter-bootstrap3 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php72Upgrade mantis-php71Upgrade mantis-php74Upgrade mantis-php73 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade python2-ipalibUpgrade resteasyUpgrade javassist-javadocUpgrade ipa-server-commonUpgrade softhsm-develUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade pki-caUpgrade ipa-client-commonUpgrade glassfish-fastinfosetUpgrade softhsmUpgrade jss-javadocUpgrade xsomUpgrade python2-ipaserverUpgrade relaxngDatatypeUpgrade pki-servlet-4.0-apiUpgrade jackson-module-jaxb-annotationsUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade xalan-j2Upgrade pki-toolsUpgrade pki-serverUpgrade opendnssecUpgrade jackson-annotationsUpgrade slf4jUpgrade jackson-coreUpgrade apache-commons-netUpgrade pki-base-javaUpgrade python3-pkiUpgrade python3-ipaclientUpgrade ipa-commonUpgrade apache-commons-langUpgrade glassfish-jaxb-txw2Upgrade custodiaUpgrade pki-kraUpgrade tomcatjssUpgrade jakarta-commons-httpclientUpgrade bind-dyndb-ldapUpgrade xml-commons-apisUpgrade python3-qrcode-coreUpgrade bea-stax-apiUpgrade jackson-databindUpgrade xerces-j2Upgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-json-providerUpgrade velocityUpgrade pki-baseUpgrade jssUpgrade xmlstreambufferUpgrade pki-servlet-engineUpgrade ldapjdk-javadocUpgrade xml-commons-resolverUpgrade glassfish-jaxb-runtimeUpgrade slapi-nisUpgrade python3-ipalibUpgrade pki-symkeyUpgrade ldapjdkUpgrade python3-custodiaUpgrade ipa-selinuxUpgrade python2-ipaclientUpgrade python3-nssUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade python3-yubicoUpgrade jackson-jaxrs-providersUpgrade ipa-serverUpgrade python-nss-docUpgrade stax-exUpgrade javassistUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade slf4j-jdk14Upgrade apache-commons-collectionsUpgrade ipa-server-trust-ad | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade relaxngDatatypeUpgrade jss-debuginfoUpgrade softhsm-debugsourceUpgrade python3-pyusbUpgrade pki-core-debuginfoUpgrade jssUpgrade apache-commons-collectionsUpgrade pki-toolsUpgrade ipa-healthcheck-coreUpgrade softhsm-debuginfoUpgrade opendnssec-debugsourceUpgrade glassfish-jaxb-coreUpgrade jackson-jaxrs-providersUpgrade python-nss-docUpgrade pki-servlet-4.0-apiUpgrade slf4jUpgrade python2-ipaserverUpgrade ipa-client-epnUpgrade jss-debugsourceUpgrade python3-kdcproxyUpgrade xml-commons-resolverUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldapUpgrade jackson-coreUpgrade python3-nssUpgrade pki-caUpgrade pki-symkeyUpgrade xsomUpgrade ipa-debugsourceUpgrade ipa-server-dnsUpgrade python3-ipaclientUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-core-debugsourceUpgrade apache-commons-netUpgrade python3-qrcodeUpgrade slf4j-jdk14Upgrade glassfish-jaxb-txw2Upgrade python-nss-debugsourceUpgrade ipa-selinuxUpgrade glassfish-jaxb-runtimeUpgrade ipa-server-trust-ad-debuginfoUpgrade custodiaUpgrade pki-tools-debuginfoUpgrade python3-jwcryptoUpgrade xerces-j2Upgrade pki-servlet-engineUpgrade velocityUpgrade ipa-client-debuginfoUpgrade ipa-server-commonUpgrade python3-yubicoUpgrade ldapjdkUpgrade ipa-client-sambaUpgrade jakarta-commons-httpclientUpgrade jss-javadocUpgrade stax-exUpgrade ipa-serverUpgrade javassist-javadocUpgrade python3-ipaserverUpgrade slapi-nis-debuginfoUpgrade resteasyUpgrade apache-commons-langUpgrade slapi-nisUpgrade ipa-debuginfoUpgrade python3-ipalibUpgrade opendnssec-debuginfoUpgrade ipa-clientUpgrade python2-ipalibUpgrade pki-kraUpgrade bind-dyndb-ldap-debuginfoUpgrade xalan-j2Upgrade ipa-healthcheckUpgrade opendnssecUpgrade jackson-module-jaxb-annotationsUpgrade jackson-databindUpgrade jackson-jaxrs-json-providerUpgrade softhsm-develNo solution existsUpgrade pki-serverUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade glassfish-jaxb-apiUpgrade python3-custodiaUpgrade softhsmUpgrade ipa-client-commonUpgrade pki-baseUpgrade xmlstreambufferUpgrade ipa-commonUpgrade python3-qrcode-coreUpgrade ipa-server-trust-adUpgrade pki-symkey-debuginfoUpgrade javassistUpgrade slapi-nis-debugsourceUpgrade ipa-server-debuginfoUpgrade python3-pkiUpgrade ipa-python-compatUpgrade glassfish-fastinfosetUpgrade tomcatjssUpgrade jackson-annotationsUpgrade python2-ipaclientUpgrade ldapjdk-javadocUpgrade bea-stax-api | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub