Review Board

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Review Board records in CISA KEV

No Review Board vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Review Board 8 records MEDIUM Reviewboard 4 records MEDIUM Djblets 3 records MEDIUM

Records

4 records in Reviewboard · all components

TI-2013-04206 CVE-2013-4796 · GHSA-q3rx-77wg-47v2

ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request

MEDIUM 42

ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0191 Published 2019-12-27 No fix listed CWE-434

TI-2013-03865 CVE-2013-4410 · GHSA-rq2f-p37v-9hqf

ReviewBoard: has an access-control problem in REST API

LOW 37

ReviewBoard: has an access-control problem in REST API

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02417 Published 2019-12-02 No fix listed CWE-863

TI-2014-03257 CVE-2014-3994 · GHSA-w7rq-8f2g-jvqr

Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets…

LOW 25

Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or H…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02403 Published 2014-06-16 Fixed in 0.7.30, 0.8.3 CWE-79

TI-2013-03866 CVE-2013-4411 · GHSA-xxp7-m5h6-5jwv

Review Board: URL processing gives unauthorized users access to review lists

LOW 23

Review Board: URL processing gives unauthorized users access to review lists

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01353 Published 2019-12-03 No fix listed CWE-863

Open these records in search →

Critical	1
High	2
Medium	10
Low	0
No CVSS	0