In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcode-coreUpgrade python3-yubicoUpgrade python3-kdcproxyUpgrade custodiaUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade python3-custodia | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-clientUpgrade ipa-serverUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-dns | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade jackson-jaxrs-json-providerUpgrade jss-javadocUpgrade glassfish-fastinfosetUpgrade python3-pkiUpgrade python3-qrcode-coreUpgrade ipa-client-epnUpgrade xalan-j2Upgrade ipa-commonUpgrade relaxngDatatypeUpgrade slf4jUpgrade jackson-coreUpgrade ipa-selinuxUpgrade python3-ipaclientUpgrade pki-serverUpgrade pki-base-javaUpgrade jss-debugsourceUpgrade ipa-server-commonUpgrade opendnssecUpgrade pki-kraUpgrade ldapjdk-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade resteasyUpgrade slapi-nis-debuginfoUpgrade bind-dyndb-ldapUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-jwcryptoUpgrade pki-symkey-debuginfoUpgrade ipa-debuginfoUpgrade xsomUpgrade pki-toolsUpgrade apache-commons-netUpgrade python3-ipaserverUpgrade xml-commons-apisUpgrade jackson-module-jaxb-annotationsUpgrade ipa-client-sambaUpgrade javassist-javadocUpgrade python-nss-debugsourceUpgrade ipa-python-compatUpgrade apache-commons-langUpgrade pki-servlet-4.0-apiUpgrade pki-caUpgrade softhsm-develUpgrade ipa-healthcheckUpgrade tomcatjssUpgrade ipa-client-debuginfoUpgrade jackson-annotationsUpgrade ipa-serverUpgrade ipa-clientUpgrade softhsmUpgrade python2-ipaserverUpgrade pki-symkeyUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-runtimeUpgrade python3-qrcodeUpgrade ipa-debugsourceUpgrade python3-ipalibUpgrade bea-stax-apiUpgrade softhsm-debugsourceUpgrade pki-core-debugsourceUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade jackson-databindUpgrade opendnssec-debuginfoUpgrade jssUpgrade pki-tools-debuginfoUpgrade jakarta-commons-httpclientUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade ldapjdkUpgrade ipa-server-debuginfoUpgrade python3-custodiaUpgrade python-nss-docUpgrade python3-kdcproxyUpgrade slf4j-jdk14Upgrade xmlstreambufferUpgrade xerces-j2Upgrade python3-nssUpgrade softhsm-debuginfoUpgrade glassfish-jaxb-apiUpgrade apache-commons-collectionsUpgrade custodiaUpgrade glassfish-jaxb-txw2Upgrade javassistUpgrade pki-core-debuginfoUpgrade velocityUpgrade pki-servlet-engineUpgrade python2-ipaclientUpgrade jss-debuginfoUpgrade glassfish-jaxb-coreUpgrade xml-commons-resolverUpgrade python2-ipalibUpgrade python3-yubicoUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-pyusbUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade pki-baseUpgrade stax-ex | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap3Upgrade twitter-bootstrap4 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php74Upgrade mantis-php73Upgrade mantis-php72Upgrade mantis-php71 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade ipa-healthcheck-coreUpgrade jackson-jaxrs-providersUpgrade pki-symkeyUpgrade python3-custodiaUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade stax-exUpgrade ipa-serverUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade velocityUpgrade glassfish-jaxb-runtimeUpgrade javassistUpgrade jssUpgrade python3-ipalibUpgrade ldapjdk-javadocUpgrade ldapjdkUpgrade jackson-databindUpgrade xerces-j2Upgrade xml-commons-resolverUpgrade python3-yubicoUpgrade bea-stax-apiUpgrade python3-qrcodeUpgrade slapi-nisUpgrade python2-ipaclientUpgrade python3-nssUpgrade xmlstreambufferUpgrade glassfish-jaxb-apiUpgrade python-nss-docUpgrade ipa-server-trust-adUpgrade jackson-jaxrs-json-providerUpgrade ipa-selinuxUpgrade pki-baseUpgrade pki-servlet-engineUpgrade jackson-coreUpgrade jackson-annotationsUpgrade pki-serverUpgrade pki-base-javaUpgrade apache-commons-netUpgrade jackson-module-jaxb-annotationsUpgrade opendnssecUpgrade ipa-commonUpgrade apache-commons-langUpgrade python3-pkiUpgrade python3-ipaclientUpgrade pki-kraUpgrade ipa-server-commonUpgrade resteasyUpgrade javassist-javadocUpgrade pki-servlet-4.0-apiUpgrade python2-ipalibUpgrade relaxngDatatypeUpgrade python2-ipaserverUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade jakarta-commons-httpclientUpgrade xml-commons-apisUpgrade tomcatjssUpgrade bind-dyndb-ldapUpgrade pki-toolsUpgrade ipa-python-compatUpgrade jss-javadocUpgrade python3-qrcode-coreUpgrade python3-ipaserverUpgrade pki-caUpgrade xsomUpgrade softhsmUpgrade python3-jwcryptoUpgrade ipa-client-commonUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade ipa-clientUpgrade glassfish-jaxb-txw2Upgrade custodiaUpgrade softhsm-develUpgrade xalan-j2Upgrade ipa-server-dns | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade python3-kdcproxyUpgrade pki-caUpgrade python-nss-docUpgrade ipa-server-dnsUpgrade ipa-client-epnUpgrade python3-nss-debuginfoUpgrade opendnssec-debugsourceUpgrade python2-ipaserverUpgrade jss-debuginfoUpgrade ipa-debugsourceUpgrade pki-toolsUpgrade slf4jUpgrade pki-servlet-4.0-apiUpgrade apache-commons-netUpgrade custodiaUpgrade relaxngDatatypeUpgrade python-nss-debugsourceUpgrade pki-core-debugsourceUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-runtimeUpgrade pki-core-debuginfoUpgrade softhsm-debuginfoUpgrade glassfish-jaxb-txw2Upgrade slf4j-jdk14Upgrade ipa-selinuxUpgrade python3-nssUpgrade xml-commons-resolverUpgrade bind-dyndb-ldapUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-ipaclientUpgrade jackson-coreUpgrade xsomUpgrade ipa-healthcheck-coreUpgrade pki-symkeyUpgrade jss-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade glassfish-jaxb-coreUpgrade softhsm-debugsourceUpgrade apache-commons-collectionsUpgrade jssUpgrade softhsmUpgrade opendnssecUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade jackson-databindUpgrade apache-commons-langUpgrade python3-jwcryptoUpgrade pki-kraUpgrade pki-base-javaUpgrade xerces-j2Upgrade ipa-debuginfoUpgrade xmlstreambufferUpgrade javassistUpgrade ipa-clientUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipaserverUpgrade ipa-serverUpgrade python3-qrcode-coreUpgrade javassist-javadocUpgrade glassfish-fastinfosetUpgrade bea-stax-apiUpgrade pki-tools-debuginfoUpgrade slapi-nis-debuginfoUpgrade ipa-server-trust-adUpgrade xml-commons-apisUpgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade python2-ipaclientNo solution existsUpgrade ipa-python-compatUpgrade tomcatjssUpgrade pki-servlet-engineUpgrade resteasyUpgrade python3-pkiUpgrade pki-symkey-debuginfoUpgrade ipa-client-commonUpgrade python3-custodiaUpgrade ipa-commonUpgrade softhsm-develUpgrade pki-baseUpgrade opendnssec-debuginfoUpgrade ipa-healthcheckUpgrade jackson-annotationsUpgrade xalan-j2Upgrade python2-ipalibUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade jss-javadocUpgrade velocityUpgrade stax-exUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade python3-yubicoUpgrade slapi-nis-debugsourceUpgrade ipa-client-debuginfoUpgrade ldapjdkUpgrade jakarta-commons-httpclientUpgrade ldapjdk-javadoc | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python3-nss | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub