GCVE - cpe:2.3:a:reviewboard:review_board:1.7.11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:reviewboard:review_board:1.7.11:*:*:*:*:*:*:*

part: a version: 1.7.11 update: *

Vendor	Reviewboard (`03e8fd37-d7e4-5bff-a191-18c0c8ada2a4`)
Product	Review Board (`79dda2b5-f088-5f0d-bf85-83cc0e51e1c4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/reviewboard/reviewboard`	purl2cpe	2026-06-01 10:12:41.369999
`pkg:pypi/reviewboard`	purl2cpe	2026-06-01 10:12:41.370000
`pkg:rpm/fedora/reviewboard`	purl2cpe	2026-06-01 10:12:41.370001
`pkg:rpm/opensuse/python-reviewboard`	purl2cpe	2026-06-01 10:12:41.370003
`pkg:sourceforge/review-board`	purl2cpe	2026-06-01 10:12:41.370004

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-5027`	vulnerable	2026-06-08 05:05:46.720724	Details available Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page. Published: 2014-07-25T19:00:00.000Z Updated: 2024-08-06T11:34:37.207Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2014/q3/207 https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4 http://secunia.com/advisories/60243 https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases http://seclists.org/oss-sec/2014/q3/219	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4795`	vulnerable	2026-06-08 05:04:49.690442	Details available Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name. Published: 2014-04-11T14:00:00.000Z Updated: 2024-08-06T16:52:27.148Z Open on db.gcve.eu Reference links http://osvdb.org/show/osvdb/96170 http://www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard http://secunia.com/advisories/54272 http://www.securityfocus.com/bid/61750 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.18	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4519`	vulnerable	2026-06-08 05:04:47.751470	Details available Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file. Published: 2013-11-15T20:00:00.000Z Updated: 2024-08-06T16:45:15.091Z Open on db.gcve.eu Reference links http://secunia.com/advisories/55623 http://www.securityfocus.com/bid/63601 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.17 http://osvdb.org/99512 http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.21	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.