[SECURITY] [DSA 3007-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3007-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 20, 2014 http://www.debian.org/security/faq -...

CVE-2014-5027

CVE-2014-5027 is an XSS vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4, allowing remote attackers to inject arbitrary web script or HTML via a query parameter on a diff fragment page. Affected software: Review Board web UI; vulnerable component: diff fragment page handli...