GCVE - cpe:2.3:a:reviewboard:review_board:1.7.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:reviewboard:review_board:1.7.2:*:*:*:*:*:*:*

part: a version: 1.7.2 update: *

Vendor	Reviewboard (`03e8fd37-d7e4-5bff-a191-18c0c8ada2a4`)
Product	Review Board (`79dda2b5-f088-5f0d-bf85-83cc0e51e1c4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/reviewboard/reviewboard`	purl2cpe	2026-06-01 10:12:41.370059
`pkg:pypi/reviewboard`	purl2cpe	2026-06-01 10:12:41.370060
`pkg:rpm/fedora/reviewboard`	purl2cpe	2026-06-01 10:12:41.370062
`pkg:rpm/opensuse/python-reviewboard`	purl2cpe	2026-06-01 10:12:41.370063
`pkg:sourceforge/review-board`	purl2cpe	2026-06-01 10:12:41.370064

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-5027`	vulnerable	2026-06-08 05:05:46.716117	Details available Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page. Published: 2014-07-25T19:00:00.000Z Updated: 2024-08-06T11:34:37.207Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2014/q3/207 https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4 http://secunia.com/advisories/60243 https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases http://seclists.org/oss-sec/2014/q3/219	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4795`	vulnerable	2026-06-08 05:04:49.690286	Details available Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name. Published: 2014-04-11T14:00:00.000Z Updated: 2024-08-06T16:52:27.148Z Open on db.gcve.eu Reference links http://osvdb.org/show/osvdb/96170 http://www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard http://secunia.com/advisories/54272 http://www.securityfocus.com/bid/61750 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.18	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4519`	vulnerable	2026-06-08 05:04:47.747157	Details available Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file. Published: 2013-11-15T20:00:00.000Z Updated: 2024-08-06T16:45:15.091Z Open on db.gcve.eu Reference links http://secunia.com/advisories/55623 http://www.securityfocus.com/bid/63601 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.17 http://osvdb.org/99512 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.21	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2209`	vulnerable	2026-06-08 05:04:23.563718	Details available Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name. Published: 2013-07-31T10:00:00.000Z Updated: 2024-08-06T15:27:41.089Z Open on db.gcve.eu Reference links http://www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard https://bugzilla.redhat.com/show_bug.cgi?id=977423 http://www.reviewboard.org/news/2013/06/22/review-board-1617-and-1710-released/ http://www.openwall.com/lists/oss-security/2013/06/24/2 https://github.com/reviewboard/reviewboard/commit/4aaacbb1e628a80803ba1a55703db38fccdf7dbf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.