CVE:CVE-2019-8331
CNNVD:CNNVD-201902-770
Bootstrap是一款使用HTML、CSS和JavaScript开发的开源Web前端框架。
Bootstrap 中存在跨站脚本漏洞。该漏洞源于工具提示或弹出框数据模板属性中可能存在 XSS。
solution:Upgrade getbootstrap bootstrap to a higher version than 3.4.1,4.3.1,and avoid the version (,3.4.1),[4.3.0,4.3.1); Upgrade f5 big-ip_access_policy_manager to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_analytics to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_application_acceleration_manager to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_application_security_manager to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_domain_name_system to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_edge_gateway to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_fraud_protection_service to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_global_traffic_manager to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_link_controller to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_local_traffic_manager to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade f5 big-ip_webaccelerator to a higher version than 12.1.5.1,13.1.3.4,14.1.2.5,15.1.0,and avoid the version [12.1.0,12.1.5.1),[13.0.0,13.1.3.4),[14.0.0,14.1.2.5),[15.0.0,15.1.0); Upgrade redhat virtualization_manager to a higher version than 4.3,and avoid the version 4.3; Upgrade tenable tenable.sc to a higher version than 5.19.0,and avoid the version (,5.19.0)