Lucene search
RedhatCVELIST:CVE-2013-2209HistoryJul 31, 2013 - 10:00 a.m.
CVE-2013-2209
2013-07-3110:00:00
redhat
www.cve.org
Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name.
References
www.openwall.com/lists/oss-security/2013/06/24/2
www.reviewboard.org/docs/releasenotes/reviewboard/1.6.17/
www.reviewboard.org/docs/releasenotes/reviewboard/1.7.10/
www.reviewboard.org/news/2013/06/22/review-board-1617-and-1710-released/
www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard
bugzilla.redhat.com/show_bug.cgi?id=977423
github.com/reviewboard/reviewboard/commit/4aaacbb1e628a80803ba1a55703db38fccdf7dbf
Related
cve
cve
CVE-2013-2209
2013-07-31 13:20:25
openvas
openvas
Fedora Update for ReviewBoard FEDORA-2013-11646
2013-07-08 00:00:00
Fedora Update for ReviewBoard FEDORA-2013-11646
2013-07-08 00:00:00
Fedora Update for ReviewBoard FEDORA-2013-11682
2013-08-20 00:00:00
osv
osv
nessus
nessus
Fedora 19 : ReviewBoard-1.7.11-1.fc19 (2013-11682)
2013-07-12 00:00:00
Fedora 18 : ReviewBoard-1.7.11-1.fc18 (2013-11646)
2013-07-12 00:00:00
github
github
fedora
fedora
[SECURITY] Fedora 19 Update: ReviewBoard-1.7.11-1.fc19
2013-07-06 00:57:54
[SECURITY] Fedora 18 Update: ReviewBoard-1.7.11-1.fc18
2013-07-06 00:50:39
prion
prion
Cross site scripting
2013-07-31 13:20:00
nvd
nvd
CVE-2013-2209
2013-07-31 13:20:25