Skip to content
OpenAdvisories
Medium · 6.1 CVE-2019-10215 EUVD-2019-2230

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exp…

Published Oct 8, 2019 · Updated Aug 4, 2024 · Assigned by redhat

Vendor: Red Hat Product: bootstrap3-typeahead.js

Description

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.

Affected products

VendorProductAffectedFixed
Red Hat bootstrap3-typeahead.js after version bootstrap3-typeahead 4.0.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP5 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SLES 12 SP4 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SLES 12 SP3 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP5 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SLES for SAP 12 SP4 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SLES for SAP 12 SP3 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SUSE OpenStack Cloud Crowbar 9 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SUSE OpenStack Cloud Crowbar 8 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SUSE OpenStack Cloud 9 cobbler 2.6.6-49.26.3 SUSE-SU-2020:1970-1
SUSE OpenStack Cloud 9 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SUSE OpenStack Cloud 8 cobbler 2.6.6-49.26.3 SUSE-SU-2020:1970-1
SUSE OpenStack Cloud 8 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 15 dracut-saltboot 0.1.1590413773.a959db7-1.12.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 golang-github-prometheus-prometheus 2.18.0-3.12.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 grafana 7.0.3-1.9.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 koan 2.9.0-4.15.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 mgr-cfg 4.1.2-1.12.4 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 mgr-custom-info 4.1.1-1.6.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 mgr-daemon +1 4.1.1-1.14.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 mgr-osad 4.1.2-1.15.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 mgr-push 4.1.1-1.6.4 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 rhnlib 4.1.2-3.16.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 spacecmd 4.1.4-3.38.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 spacewalk-client-tools 4.1.5-3.23.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 spacewalk-koan 4.1.1-3.9.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 spacewalk-oscap 4.1.1-3.6.3 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 spacewalk-remote-utils 4.1.1-3.12.4 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 supportutils-plugin-susemanager-client 4.1.2-3.9.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 suseRegisterInfo 4.1.2-3.6.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 uyuni-base 4.1.1-1.3.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 uyuni-common-libs 4.1.5-1.3.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 15 zypp-plugin-spacewalk 1.0.7-3.12.2 SUSE-SU-2020:1972-1
SUSE Manager Client Tools 12 cobbler 2.6.6-49.26.3 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 golang-github-prometheus-prometheus 2.18.0-1.12.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 grafana 7.0.3-1.9.3 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 mgr-cfg 4.1.2-1.12.3 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 mgr-custom-info 4.1.1-1.6.1 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 mgr-daemon 4.1.1-1.14.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 mgr-osad 4.1.2-1.15.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 mgr-push 4.1.1-1.6.3 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 mgr-virtualization 4.1.1-1.14.3 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 rhnlib 4.1.2-21.22.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 spacecmd 4.1.4-38.61.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 spacewalk-client-tools 4.1.5-52.32.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 spacewalk-koan 4.1.1-24.12.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 spacewalk-oscap 4.1.1-19.12.1 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 spacewalk-remote-utils 4.1.1-24.15.3 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 supportutils-plugin-susemanager-client 4.1.2-6.15.1 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 suseRegisterInfo 4.1.2-25.9.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 uyuni-base 4.1.1-1.3.1 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 uyuni-common-libs 4.1.5-1.3.2 SUSE-SU-2020:1970-1
SUSE Manager Client Tools 12 zypp-plugin-spacewalk 1.0.7-30.21.2 SUSE-SU-2020:1970-1
SUSE HPE Helion OpenStack 8 cobbler 2.6.6-49.26.3 SUSE-SU-2020:1970-1
SUSE HPE Helion OpenStack 8 golang-github-prometheus-node_exporter 0.18.1-1.6.2 SUSE-SU-2020:1970-1
SUSE Enterprise Storage 6 golang-github-prometheus-prometheus 2.18.0-3.3.1 SUSE-SU-2020:2606-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed golang-github-prometheus-prometheus 2.27.1-4.2 openSUSE-SU-2024:10814-1
openSUSE Leap 15.2 dracut-saltboot 0.1.1590413773.a959db7-lp152.2.3.1 openSUSE-SU-2020:1105-1

Advisories 5

References