In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-custodiaUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade python3-pyusbUpgrade custodiaUpgrade python3-qrcode-coreUpgrade python3-kdcproxy | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-client-commonUpgrade ipa-commonUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade python2-ipalibUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade python2-ipaclient | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade ipa-healthcheck-coreUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nisUpgrade python3-pyusbUpgrade javassistUpgrade slapi-nis-debugsourceUpgrade pki-baseUpgrade ldapjdkUpgrade stax-exUpgrade python-nss-docUpgrade velocityUpgrade bea-stax-apiUpgrade pki-core-debuginfoUpgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade pki-core-debugsourceUpgrade python2-ipalibUpgrade ipa-debugsourceUpgrade softhsm-debugsourceUpgrade python3-ipalibUpgrade opendnssec-debugsourceUpgrade apache-commons-collectionsUpgrade ipa-client-commonUpgrade python3-custodiaUpgrade glassfish-jaxb-runtimeUpgrade ipa-server-dnsUpgrade python2-ipaclientUpgrade xerces-j2Upgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-apiUpgrade softhsm-debuginfoUpgrade custodiaUpgrade xml-commons-resolverUpgrade python3-nssUpgrade python2-ipaserverUpgrade jakarta-commons-httpclientUpgrade softhsmUpgrade pki-servlet-engineUpgrade xmlstreambufferUpgrade slf4j-jdk14Upgrade ipa-server-trust-adUpgrade jackson-databindUpgrade ipa-server-debuginfoUpgrade pki-tools-debuginfoUpgrade jssUpgrade pki-symkeyUpgrade jackson-jaxrs-providersUpgrade python3-yubicoUpgrade opendnssec-debuginfoUpgrade jss-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-toolsUpgrade pki-kraUpgrade apache-commons-netUpgrade ipa-client-debuginfoUpgrade slapi-nis-debuginfoUpgrade python3-jwcryptoUpgrade ipa-serverUpgrade softhsm-develUpgrade jackson-annotationsUpgrade javassist-javadocUpgrade ipa-healthcheckUpgrade python-nss-debugsourceUpgrade jss-debugsourceUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade ipa-selinuxUpgrade pki-serverUpgrade pki-caUpgrade resteasyUpgrade python3-nss-debuginfoUpgrade glassfish-fastinfosetUpgrade jackson-module-jaxb-annotationsUpgrade ipa-clientUpgrade tomcatjssUpgrade ipa-commonUpgrade python3-pkiUpgrade jss-javadocUpgrade jackson-jaxrs-json-providerUpgrade ldapjdk-javadocUpgrade ipa-python-compatUpgrade pki-base-javaUpgrade slf4jUpgrade pki-servlet-4.0-apiUpgrade xml-commons-apisUpgrade python3-qrcode-coreUpgrade opendnssecUpgrade xsomUpgrade python3-ipaserverUpgrade relaxngDatatypeUpgrade ipa-client-sambaUpgrade apache-commons-langUpgrade pki-symkey-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-client-epnUpgrade jackson-coreUpgrade xalan-j2Upgrade bind-dyndb-ldap-debugsourceUpgrade python3-ipaclient | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap4Upgrade twitter-bootstrap3 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php73Upgrade mantis-php74Upgrade mantis-php71Upgrade mantis-php72 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade relaxngDatatypeUpgrade ipa-healthcheckUpgrade pki-servlet-4.0-apiUpgrade jackson-module-jaxb-annotationsUpgrade python2-ipaserverUpgrade python2-ipalibUpgrade pki-base-javaUpgrade slf4jUpgrade jackson-annotationsUpgrade ipa-commonUpgrade jackson-coreUpgrade opendnssecUpgrade apache-commons-netUpgrade apache-commons-langUpgrade pki-kraUpgrade python3-ipaclientUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-txw2Upgrade ipa-client-epnUpgrade ipa-clientUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade pki-toolsUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade pki-caUpgrade xsomUpgrade python3-jwcryptoUpgrade python3-pkiUpgrade softhsmUpgrade softhsm-develUpgrade xalan-j2Upgrade jakarta-commons-httpclientUpgrade bind-dyndb-ldapUpgrade ipa-server-commonUpgrade xml-commons-apisUpgrade tomcatjssUpgrade javassist-javadocUpgrade resteasyUpgrade jss-javadocUpgrade custodiaUpgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade pki-serverUpgrade python-nss-docUpgrade python3-pyusbUpgrade ipa-healthcheck-coreUpgrade glassfish-jaxb-runtimeUpgrade python2-ipaclientUpgrade ipa-selinuxUpgrade python3-qrcodeUpgrade pki-symkeyUpgrade python3-nssUpgrade stax-exUpgrade apache-commons-collectionsUpgrade ipa-server-trust-adUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade python3-kdcproxyUpgrade ipa-serverUpgrade jssUpgrade glassfish-jaxb-apiUpgrade pki-baseUpgrade bea-stax-apiUpgrade jackson-databindUpgrade ldapjdkUpgrade xmlstreambufferUpgrade xml-commons-resolverUpgrade python3-yubicoUpgrade python3-ipalibUpgrade ldapjdk-javadocUpgrade javassistUpgrade velocityUpgrade pki-servlet-engineUpgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade slapi-nisUpgrade python3-custodiaUpgrade jackson-jaxrs-providers | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade ipa-serverUpgrade bea-stax-apiUpgrade glassfish-fastinfosetUpgrade ipa-commonUpgrade xmlstreambufferUpgrade pki-baseUpgrade python3-custodiaUpgrade ldapjdkUpgrade python3-ipaserverUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade xalan-j2Upgrade jackson-annotationsUpgrade pki-base-javaUpgrade ipa-healthcheckUpgrade javassist-javadocUpgrade slapi-nis-debuginfoUpgrade pki-symkey-debuginfoUpgrade resteasyUpgrade pki-servlet-engineUpgrade ipa-server-trust-adUpgrade python2-ipalibUpgrade python2-ipaclientNo solution existsUpgrade jakarta-commons-httpclientUpgrade ipa-client-sambaUpgrade ipa-server-commonUpgrade tomcatjssUpgrade apache-commons-langUpgrade ipa-debuginfoUpgrade python3-ipalibUpgrade ipa-clientUpgrade pki-kraUpgrade xerces-j2Upgrade python3-yubicoUpgrade opendnssecUpgrade bind-dyndb-ldap-debuginfoUpgrade javassistUpgrade pki-tools-debuginfoUpgrade xml-commons-apisUpgrade opendnssec-debuginfoUpgrade python3-pkiUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade softhsmUpgrade slapi-nisUpgrade jss-javadocUpgrade slapi-nis-debugsourceUpgrade velocityUpgrade stax-exUpgrade ipa-server-debuginfoUpgrade ipa-client-debuginfoUpgrade python3-jwcryptoUpgrade ipa-client-commonUpgrade jackson-module-jaxb-annotationsUpgrade softhsm-develUpgrade jackson-databindUpgrade ipa-server-trust-ad-debuginfoUpgrade xml-commons-resolverUpgrade jss-debuginfoUpgrade apache-commons-collectionsUpgrade python3-ipaclientUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade python3-nssUpgrade python3-pyusbUpgrade ipa-client-epnUpgrade xsomUpgrade jss-debugsourceUpgrade jackson-coreUpgrade opendnssec-debugsourceUpgrade ipa-server-dnsUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade custodiaUpgrade ipa-healthcheck-coreUpgrade relaxngDatatypeUpgrade pki-symkeyUpgrade apache-commons-netUpgrade pki-caUpgrade softhsm-debuginfoUpgrade jackson-jaxrs-providersUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade python2-ipaserverUpgrade pki-toolsUpgrade jssUpgrade ipa-debugsourceUpgrade pki-core-debugsourceUpgrade python3-kdcproxyUpgrade bind-dyndb-ldap-debugsourceUpgrade python-nss-debugsourceUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-runtimeUpgrade softhsm-debugsourceUpgrade ipa-selinuxUpgrade glassfish-jaxb-txw2Upgrade slf4jUpgrade pki-core-debuginfo | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python3-nss | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub