Review Board

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Review Board records in CISA KEV

No Review Board vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Review Board 8 records MEDIUM Reviewboard 4 records MEDIUM Djblets 3 records MEDIUM

Records

3 records in Djblets · all components

TI-2013-03864 CVE-2013-4409 · GHSA-58h8-44mg-r43x

Improper input validation in Python Software Foundation; Beanbag Djblets

MEDIUM 48

An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03649 Published 2019-11-04 Fixed in 1.7.15, 0.6.30 +1 CWE-20

TI-2014-03257 CVE-2014-3994 · GHSA-w7rq-8f2g-jvqr

Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets…

LOW 25

Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or H…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02403 Published 2014-06-16 Fixed in 0.7.30, 0.8.3 CWE-79

TI-2014-03258 CVE-2014-3995 · GHSA-4xf6-xr96-7vmp

Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in…

LOW 24

Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02093 Published 2014-06-16 Fixed in 0.7.30, 0.8.3 CWE-79

Open these records in search →

Critical	1
High	2
Medium	10
Low	0
No CVSS	0