Approved changes feed: RSS · Atom

cpe:2.3:a:reviewboard:review_board:1.6.2:*:*:*:*:*:*:*

part: a version: 1.6.2 update: *

VendorReviewboard (03e8fd37-d7e4-5bff-a191-18c0c8ada2a4)
ProductReview Board (79dda2b5-f088-5f0d-bf85-83cc0e51e1c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/reviewboard/reviewboard purl2cpe 2026-06-01 10:12:41.369876
pkg:pypi/reviewboard purl2cpe 2026-06-01 10:12:41.369877
pkg:rpm/fedora/reviewboard purl2cpe 2026-06-01 10:12:41.369879
pkg:rpm/opensuse/python-reviewboard purl2cpe 2026-06-01 10:12:41.369880
pkg:sourceforge/review-board purl2cpe 2026-06-01 10:12:41.369881

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4795 vulnerable 2026-06-08 05:04:49.690050 Details available
Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name.
Published: 2014-04-11T14:00:00.000Z
Updated: 2024-08-06T16:52:27.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4519 vulnerable 2026-06-08 05:04:47.736532 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.
Published: 2013-11-15T20:00:00.000Z
Updated: 2024-08-06T16:45:15.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2209 vulnerable 2026-06-08 05:04:23.553883 Details available
Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name.
Published: 2013-07-31T10:00:00.000Z
Updated: 2024-08-06T15:27:41.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4312 vulnerable 2026-06-08 04:59:30.157850 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) diff viewer or (2) screenshot component.
Published: 2011-11-24T02:00:00.000Z
Updated: 2024-08-07T00:01:51.569Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.