CVE-2013-4795

Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:reviewboard:review_board:1.7.0:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.5:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.6:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6:rc2:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.16:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.17:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.3:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.4:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6:beta2:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.10:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.11:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.8:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.9:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.2:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.11:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.13:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.14:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6:beta1:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.12:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6:rc1:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.10:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.15:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.7:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.7.1:*:*:*:*:*:*:*
cpe:2.3:a:reviewboard:review_board:1.6.2:*:*:*:*:*:*:*

Information

Published : 2014-04-11 07:55

Updated : 2017-08-28 18:33


NVD link : CVE-2013-4795

Mitre link : CVE-2013-4795


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

reviewboard

  • review_board