Review Board

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Review Board records in CISA KEV

No Review Board vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Review Board 8 records MEDIUM Reviewboard 4 records MEDIUM Djblets 3 records MEDIUM

Records

13 records

TI-2013-03864 CVE-2013-4409 · GHSA-58h8-44mg-r43x

Improper input validation in Python Software Foundation; Beanbag Djblets

MEDIUM 48

An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03649 Published 2019-11-04 Fixed in 1.7.15, 0.6.30 +1 CWE-20

TI-2013-04206 CVE-2013-4796 · GHSA-q3rx-77wg-47v2

ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request

MEDIUM 42

ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0191 Published 2019-12-27 No fix listed CWE-434

TI-2013-03865 CVE-2013-4410 · GHSA-rq2f-p37v-9hqf

ReviewBoard: has an access-control problem in REST API

LOW 37

ReviewBoard: has an access-control problem in REST API

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02417 Published 2019-12-02 No fix listed CWE-863

TI-2014-04130 CVE-2014-5028 · GHSA-p869-r3h5-mpvv

The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and…

LOW 32

The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information from reposi…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0164 Published 2018-03-29 No fix listed CWE-200

TI-2021-11480 CVE-2021-31330 · GHSA-mhg9-m5gc-hhqw

A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and…

LOW 26

A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00822 Published 2022-05-11 No fix listed CWE-79

TI-2014-03257 CVE-2014-3994 · GHSA-w7rq-8f2g-jvqr

Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets…

LOW 25

Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or H…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02403 Published 2014-06-16 Fixed in 0.7.30, 0.8.3 CWE-79

TI-2014-03258 CVE-2014-3995 · GHSA-4xf6-xr96-7vmp

Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in…

LOW 24

Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02093 Published 2014-06-16 Fixed in 0.7.30, 0.8.3 CWE-79

TI-2013-03966 CVE-2013-4519 · GHSA-h799-43v5-pgxw

Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02015 Published 2013-11-15 No fix listed CWE-79

TI-2013-01975 CVE-2013-2209 · GHSA-6g7x-4c7m-g63m

Cross-site scripting (XSS) vulnerability in the auto-complete widget in…

LOW 24

Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02182 Published 2013-07-31 Fixed in 1.6.17, 1.7.10 CWE-79

TI-2011-03779 CVE-2011-4312 · GHSA-4cwr-57j7-96p4

Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02252 Published 2011-11-24 No fix listed CWE-79

TI-2014-04129 CVE-2014-5027 · GHSA-6mg9-jgmx-fc96

Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x…

LOW 23

Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01325 Published 2014-07-25 No fix listed CWE-79

TI-2013-04205 CVE-2013-4795 · GHSA-xhxw-wjgx-9674

Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x…

LOW 23

Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01379 Published 2014-04-11 No fix listed CWE-79

TI-2013-03866 CVE-2013-4411 · GHSA-xxp7-m5h6-5jwv

Review Board: URL processing gives unauthorized users access to review lists

LOW 23

Review Board: URL processing gives unauthorized users access to review lists

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01353 Published 2019-12-03 No fix listed CWE-863

Open these records in search →

Critical	1
High	2
Medium	10
Low	0
No CVSS	0