Lucene search
RedHatRHSA-2020:5571HistoryDec 16, 2020 - 12:54 p.m.
(RHSA-2020:5571) Moderate: python-XStatic-Bootstrap-SCSS security update
2020-12-1612:54:58
access.redhat.com
46
0.005 Low
EPSS
Percentile
75.6%
python-XStatic-Bootstrap-SCSS is the Bootstrap-SCSS JavaScript library packaged for setuptools / pip.
Security Fix(es):
-
XSS in the data-target attribute (CVE-2016-10735)
-
Cross-site Scripting (XSS) in the data-container property of tooltip
(CVE-2018-14042) -
XSS in the tooltip data-viewport attribute (CVE-2018-20676)
-
XSS in the affix configuration target property (CVE-2018-20677)
-
XSS in the tooltip or popover data-template attribute (CVE-2019-8331)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | python-xstatic-bootstrap-scss | < 3.4.1.0-1.el7ost | python-XStatic-Bootstrap-SCSS-3.4.1.0-1.el7ost.noarch.rpm |
| RedHat | 7 | noarch | xstatic-bootstrap-scss-common | < 3.4.1.0-1.el7ost | xstatic-bootstrap-scss-common-3.4.1.0-1.el7ost.noarch.rpm |
Related
nessus
nessus
RHEL 7 : python-XStatic-Bootstrap-SCSS (RHSA-2020:5571)
2020-12-18 00:00:00
Tenable SecurityCenter < 5.19.0 Multiple XSS Vulnerabilities (TNS-2021-14)
2021-09-03 00:00:00
RHEL 7 : Virtualization Manager (RHSA-2019:3023)
2019-10-15 00:00:00
ibm
ibm
redhat
redhat
centos
centos
ipa, python2 security update
2020-10-20 18:15:27
almalinux
almalinux
oraclelinux
oraclelinux
idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-10 00:00:00
ipa security, bug fix, and enhancement update
2020-10-06 00:00:00
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-11-10 00:00:00
osv
osv
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-03 12:25:36
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-03 12:25:36
bootstrap Cross-site Scripting vulnerability
2019-01-17 13:57:56
rocky
rocky
idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-03 12:25:36
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-11-03 12:29:58
amazon
amazon
Medium: ipa
2020-10-22 17:40:00
laminas
laminas
XSS vectors in laminas-api-tools/api-tools
2020-04-01 21:30:00
ics
ics
Mitsubishi Electric EcoWebServerIII
2022-02-24 12:00:00
openvas
openvas
Pi-hole Web Interface < 5.0 Multiple Vulnerabilities
2020-05-12 00:00:00
hackerone
hackerone
prion
prion
Design/Logic Flaw
2019-01-09 05:29:00
Design/Logic Flaw
2019-01-09 05:29:00
Design/Logic Flaw
2018-07-13 14:29:00
github
github
XSS vulnerability that affects bootstrap
2019-01-17 13:57:34
bootstrap Cross-site Scripting vulnerability
2019-01-17 13:57:56
Bootstrap Vulnerable to Cross-Site Scripting
2019-02-22 20:54:47
nvd
nvd
cve
cve
cvelist
cvelist
debiancve
debiancve
veracode
veracode
Cross-site Scripting (XSS)
2019-01-10 01:44:15
Cross-Site Scripting (XSS)
2019-01-10 01:52:43
Cross-site Scripting (XSS)
2018-05-31 04:13:41
redhatcve
redhatcve
gitlab
gitlab
f5
f5
K19785240 : Bootstrap vulnerability CVE-2018-14042
2021-11-19 00:00:00
K24383845 : Bootstrap vulnerability CVE-2019-8331
2019-04-10 00:00:00
K000133673 : Bootstrap vulnerability CVE-2016-10735
2023-04-27 00:00:00
ubuntucve
ubuntucve
typo3
typo3
Cross-Site Scripting in Bootstrap CSS toolkit before 3.4.1 and 4.3.0
2019-05-07 00:00:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Getbootstrap Bootstrap
2020-12-01 09:18:58
nodejs
nodejs
Cross-Site Scripting
2019-05-22 18:03:13
freebsd
freebsd
mantis -- multiple vulnerabilities
2019-08-28 00:00:00
rubygems
rubygems
jvn
jvn
JVN#06527859: KinagaCMS vulnerable to cross-site scripting
2019-03-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00