Reviewboard

13 CVEs across 3 Reviewboard products. Browse Reviewboard vulnerabilities, severities, and proof-of-concept exploits.

Reviewboard products with known CVEs

ProductCVEs
Review Board8
Reviewboard4
Djblets3
Reviewboard CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-31330Medium5.42022-05-11A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authenticated attacker may inject malicious J…
CVE-2013-4796High8.82019-12-27ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request
CVE-2013-4411Medium4.32019-12-03Review Board: URL processing gives unauthorized users access to review lists
CVE-2013-4410High7.52019-12-02ReviewBoard: has an access-control problem in REST API
CVE-2013-4409Critical9.82019-11-04An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.
CVE-2014-5028Medium6.52018-03-29The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended acc…
CVE-2014-50272014-07-25Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or H…
CVE-2014-39952014-06-16Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attack…
CVE-2014-39942014-06-16Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board…
CVE-2013-47952014-04-11Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject a…
CVE-2013-45192013-11-19Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web…
CVE-2013-22092013-07-31Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7…
CVE-2011-43122011-11-24Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inje…