GCVE - cpe:2.3:a:reviewboard:review_board:1.7.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:reviewboard:review_board:1.7.1:*:*:*:*:*:*:*

part: a version: 1.7.1 update: *

Vendor	Reviewboard (`03e8fd37-d7e4-5bff-a191-18c0c8ada2a4`)
Product	Review Board (`79dda2b5-f088-5f0d-bf85-83cc0e51e1c4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/reviewboard/reviewboard`	purl2cpe	2026-06-01 10:12:41.369985
`pkg:pypi/reviewboard`	purl2cpe	2026-06-01 10:12:41.369986
`pkg:rpm/fedora/reviewboard`	purl2cpe	2026-06-01 10:12:41.369988
`pkg:rpm/opensuse/python-reviewboard`	purl2cpe	2026-06-01 10:12:41.369989
`pkg:sourceforge/review-board`	purl2cpe	2026-06-01 10:12:41.369990

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-5027`	vulnerable	2026-06-08 05:05:46.715605	Details available Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page. Published: 2014-07-25T19:00:00.000Z Updated: 2024-08-06T11:34:37.207Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2014/q3/207 https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4 http://secunia.com/advisories/60243 https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases http://seclists.org/oss-sec/2014/q3/219	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4795`	vulnerable	2026-06-08 05:04:49.690268	Details available Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name. Published: 2014-04-11T14:00:00.000Z Updated: 2024-08-06T16:52:27.148Z Open on db.gcve.eu Reference links http://osvdb.org/show/osvdb/96170 http://www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard http://secunia.com/advisories/54272 http://www.securityfocus.com/bid/61750 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.18	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4519`	vulnerable	2026-06-08 05:04:47.746700	Details available Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file. Published: 2013-11-15T20:00:00.000Z Updated: 2024-08-06T16:45:15.091Z Open on db.gcve.eu Reference links http://secunia.com/advisories/55623 http://www.securityfocus.com/bid/63601 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.17 http://osvdb.org/99512 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.21	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2209`	vulnerable	2026-06-08 05:04:23.563140	Details available Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name. Published: 2013-07-31T10:00:00.000Z Updated: 2024-08-06T15:27:41.089Z Open on db.gcve.eu Reference links http://www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard https://bugzilla.redhat.com/show_bug.cgi?id=977423 http://www.reviewboard.org/news/2013/06/22/review-board-1617-and-1710-released/ http://www.openwall.com/lists/oss-security/2013/06/24/2 https://github.com/reviewboard/reviewboard/commit/4aaacbb1e628a80803ba1a55703db38fccdf7dbf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.