Red Hat Security Advisory

RHSA-2022:8848

Red Hat OpenStack 16.2.4 (python-XStatic-Bootstrap-SCSS) security update

Released 2022-12-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 16.2 python-XStatic-Bootstrap-SCSS-3.4.1.0-2.el8ost, python3-XStatic-Bootstrap-SCSS-3.4.1.0-2.el8ost, xstatic-bootstrap-scss-common-3.4.1.0-2.el8ost

TI-2019-05979 CVE-2019-8331 · GHSA-9v3m-8fp8-mj99

MEDIUM 44

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.16404 Published 2019-02-20 Partial fix · 4.3.1, 3.4.1 +1 CWE-79