Red Hat Security Advisory

RHSA-2022:8865

Red Hat OpenStack 16.1.9 (python-XStatic-Bootstrap-SCSS) security update

Released 2022-12-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2019-05979 CVE-2019-8331 · GHSA-9v3m-8fp8-mj99

MEDIUM 44

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.16404 Published 2019-02-20 Partial fix · 4.3.1, 3.4.1 +1 CWE-79