VDB
BDU%3A2020-02249
BDU%3A2020-02249
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Уязвимость компонентов tooltip и popover набора инструментов для создания сайтов и веб-приложений Bootstrap, позволяющая нарушителю осуществлять межсайтовые сценарные атаки
Risk Scores
CVSS 2.0
5.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat, Inc., Getbootstrap, Broadcom Inc. | Red Hat Single Sign-On, Red Hat Virtualization Engine, Bootstrap, VMware Tanzu Operations Manager | |
| Red Hat Inc., Getbootstrap, VMware Inc. | Red Hat Single Sign-On, Red Hat Virtualization Engine, Bootstrap, Ops Manager |
Timeline
- May 21, 2020 CVE Published
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://access.redhat.com/security/cve/cve-2019-8331 url
- https://lists.apache.org/thread.html/10f0f3aefd51444d1198c65f44ffdf2d78ca3359423dbc1c168c9731@%3Cdev.flink.apache.org%3E url
- https://lists.apache.org/thread.html/17ff53f7999e74fbe3cc0ceb4e1c3b00b180b7c5afec8e978837bc49@%3Cuser.flink.apache.org%3E url
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E url
- https://lists.apache.org/thread.html/52bafac05ad174000ea465fe275fd3cc7bd5c25535a7631c0bc9bfb2@%3Cuser.flink.apache.org%3E url
- https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E url
- https://lists.apache.org/thread.html/54df3aeb4239b64b50b356f0ca6f986e3c4ca5b84c515dce077c7854@%3Cuser.flink.apache.org%3E url
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E url
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E url
- https://blog.getbootstrap.com/2019/02/13/bootstrap-4-3-1-and-3-4-1/ advisory
- https://github.com/twbs/bootstrap/pull/28236 advisory
- https://github.com/twbs/bootstrap/releases/tag/v3.4.1 advisory
- https://github.com/twbs/bootstrap/releases/tag/v4.3.1 advisory
- https://access.redhat.com/errata/RHSA-2019:1456 advisory
- https://access.redhat.com/errata/RHSA-2019:3023 advisory
- https://access.redhat.com/errata/RHSA-2019:3024 advisory
- https://tanzu.vmware.com/security/cve-2019-8331 advisory