CVE-2019-8331

—

CVSS 3.1

6.1 medium

EPSS

16%p97

Published

Feb 20, 2019 (Feb 20, 2019)

Modified

Jun 17, 2026

Description

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

Vendors: getbootstrap f5 redhat tenable
Products: bootstrap, big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics, big-ip application acceleration manager, big-ip application security manager, big-ip domain name system, big-ip edge gateway, big-ip fraud protection service, big-ip global traffic manager, big-ip link controller, big-ip local traffic manager
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (16.4%)

In the news0 stories

No ingested article mentions this CVE yet.