In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcryptoUpgrade python3-custodiaUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade python3-yubicoUpgrade custodia | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade ipa-commonUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade python2-ipaclient | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade slapi-nis-debuginfoUpgrade softhsm-develUpgrade bind-dyndb-ldapUpgrade pki-toolsUpgrade resteasyUpgrade jackson-module-jaxb-annotationsUpgrade python3-ipaclientUpgrade pki-caUpgrade ipa-debuginfoUpgrade pki-symkey-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade jackson-jaxrs-json-providerUpgrade pki-kraUpgrade python3-nss-debuginfoUpgrade ipa-clientUpgrade xalan-j2Upgrade glassfish-fastinfosetUpgrade ipa-selinuxUpgrade pki-base-javaUpgrade tomcatjssUpgrade xsomUpgrade slf4jUpgrade xml-commons-apisUpgrade python-nss-debugsourceUpgrade pki-servlet-4.0-apiUpgrade relaxngDatatypeUpgrade python3-qrcode-coreUpgrade ipa-healthcheckUpgrade python3-pkiUpgrade ipa-python-compatUpgrade jss-javadocUpgrade apache-commons-netUpgrade ldapjdk-javadocUpgrade ipa-serverUpgrade python3-ipaserverUpgrade jackson-coreUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-debuginfoUpgrade pki-serverUpgrade python3-jwcryptoUpgrade opendnssecUpgrade apache-commons-langUpgrade ipa-client-sambaUpgrade ipa-commonUpgrade ipa-server-commonUpgrade jss-debugsourceUpgrade jackson-annotationsUpgrade ipa-client-epnUpgrade javassist-javadocUpgrade jss-debuginfoUpgrade glassfish-jaxb-coreUpgrade opendnssec-debuginfoUpgrade python3-qrcodeUpgrade glassfish-jaxb-txw2Upgrade custodiaUpgrade xml-commons-resolverUpgrade python3-yubicoUpgrade python3-pyusbUpgrade jackson-jaxrs-providersUpgrade pki-core-debuginfoUpgrade softhsm-debuginfoUpgrade slapi-nisUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade slapi-nis-debugsourceUpgrade ldapjdkUpgrade python3-custodiaUpgrade python-nss-docUpgrade python3-kdcproxyUpgrade pki-symkeyUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheck-coreUpgrade xmlstreambufferUpgrade xerces-j2Upgrade python3-ipalibUpgrade stax-exUpgrade bea-stax-apiUpgrade pki-baseUpgrade velocityUpgrade javassistUpgrade pki-core-debugsourceUpgrade python2-ipaserverUpgrade ipa-debugsourceUpgrade ipa-server-dnsUpgrade softhsmUpgrade opendnssec-debugsourceUpgrade apache-commons-collectionsUpgrade ipa-server-debuginfoUpgrade jakarta-commons-httpclientUpgrade pki-tools-debuginfoUpgrade slf4j-jdk14Upgrade jssUpgrade jackson-databindUpgrade ipa-server-trust-adUpgrade softhsm-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade python2-ipaclientUpgrade pki-servlet-engineUpgrade python3-nss | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap4Upgrade twitter-bootstrap3 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php74Upgrade mantis-php73Upgrade mantis-php71Upgrade mantis-php72 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade pki-servlet-4.0-apiUpgrade jackson-module-jaxb-annotationsUpgrade relaxngDatatypeUpgrade ipa-healthcheckUpgrade tomcatjssUpgrade xml-commons-apisUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldapUpgrade python3-ipaserverUpgrade ipa-client-epnUpgrade python3-ipaclientUpgrade xsomUpgrade javassist-javadocUpgrade python3-jwcryptoUpgrade resteasyUpgrade ipa-client-commonUpgrade jss-javadocUpgrade pki-caUpgrade ipa-server-commonUpgrade pki-toolsUpgrade ipa-client-sambaUpgrade python2-ipaserverUpgrade python2-ipalibUpgrade softhsmUpgrade softhsm-develUpgrade apache-commons-langUpgrade pki-serverUpgrade slf4jUpgrade jackson-coreUpgrade ipa-commonUpgrade apache-commons-netUpgrade jackson-annotationsUpgrade pki-base-javaUpgrade python3-pkiUpgrade opendnssecUpgrade ipa-python-compatUpgrade pki-kraUpgrade glassfish-fastinfosetUpgrade ipa-server-dnsUpgrade xalan-j2Upgrade glassfish-jaxb-txw2Upgrade custodiaUpgrade jakarta-commons-httpclientUpgrade ipa-clientUpgrade ldapjdk-javadocUpgrade python3-ipalibUpgrade slf4j-jdk14Upgrade ipa-server-trust-adUpgrade glassfish-jaxb-coreUpgrade ipa-serverUpgrade jackson-databindUpgrade bea-stax-apiUpgrade ldapjdkUpgrade python3-kdcproxyUpgrade apache-commons-collectionsUpgrade python3-qrcodeUpgrade python3-nssUpgrade python2-ipaclientUpgrade ipa-selinuxUpgrade velocityUpgrade pki-baseUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade python3-pyusbUpgrade python-nss-docUpgrade xerces-j2Upgrade javassistUpgrade xmlstreambufferUpgrade stax-exUpgrade pki-symkeyUpgrade jackson-jaxrs-providersUpgrade ipa-healthcheck-coreUpgrade glassfish-jaxb-runtimeUpgrade python3-custodiaUpgrade jssUpgrade xml-commons-resolverUpgrade slapi-nisUpgrade python3-yubico | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade python3-nssUpgrade softhsm-debuginfoUpgrade ipa-selinuxUpgrade ipa-client-epnUpgrade jssUpgrade jackson-jaxrs-providersUpgrade pki-toolsUpgrade glassfish-jaxb-coreUpgrade python3-kdcproxyUpgrade jss-debuginfoUpgrade pki-symkeyUpgrade softhsm-debugsourceUpgrade pki-core-debuginfoUpgrade apache-commons-collectionsUpgrade jss-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade opendnssec-debugsourceUpgrade pki-core-debugsourceUpgrade pki-servlet-4.0-apiUpgrade python-nss-debugsourceUpgrade glassfish-jaxb-txw2Upgrade slf4jUpgrade xml-commons-resolverUpgrade python-nss-docUpgrade bind-dyndb-ldap-debugsourceUpgrade python2-ipaserverUpgrade ipa-debugsourceUpgrade pki-caUpgrade ipa-healthcheck-coreUpgrade ipa-server-dnsUpgrade python3-nss-debuginfoUpgrade python3-ipaclientUpgrade relaxngDatatypeUpgrade python3-pyusbUpgrade custodiaUpgrade python3-qrcodeUpgrade bind-dyndb-ldapUpgrade apache-commons-netUpgrade jackson-coreUpgrade xsomUpgrade ipa-server-trust-ad-debuginfoUpgrade slf4j-jdk14Upgrade ipa-server-trust-adUpgrade xalan-j2Upgrade opendnssecUpgrade python2-ipaclientUpgrade bea-stax-apiUpgrade python3-qrcode-coreUpgrade slapi-nis-debuginfoUpgrade glassfish-fastinfosetUpgrade ipa-serverUpgrade python3-jwcryptoUpgrade pki-tools-debuginfoUpgrade jakarta-commons-httpclientUpgrade pki-baseUpgrade jackson-databindUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade ipa-commonUpgrade python3-ipalibUpgrade jss-javadocUpgrade ipa-server-debuginfoUpgrade ipa-python-compatUpgrade pki-base-javaUpgrade softhsmNo solution existsUpgrade glassfish-jaxb-apiUpgrade xml-commons-apisUpgrade tomcatjssUpgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade python3-pkiUpgrade xerces-j2Upgrade velocityUpgrade slapi-nis-debugsourceUpgrade stax-exUpgrade opendnssec-debuginfoUpgrade jackson-annotationsUpgrade bind-dyndb-ldap-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade apache-commons-langUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade ldapjdk-javadocUpgrade ipa-healthcheckUpgrade ldapjdkUpgrade python2-ipalibUpgrade xmlstreambufferUpgrade python3-custodiaUpgrade softhsm-develUpgrade ipa-client-commonUpgrade ipa-client-debuginfoUpgrade javassistUpgrade pki-kraUpgrade slapi-nisUpgrade python3-yubicoUpgrade pki-servlet-engineUpgrade javassist-javadocUpgrade pki-symkey-debuginfoUpgrade resteasyUpgrade python3-ipaserver | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfo | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub