EUVD-2013-4641

Malware in sbrugna...

CVE-2013-4796

ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request...

GHSA-58H8-44MG-R43X ReviewBoard and Djblets library are vulnerable to code execution

An eval vulnerability exists in Python Software Foundation Djblets version before 0.6.30 and 0.7.0 before 0.7.19 and Beanbag Review Board before 1.7.15 when parsing JSON requests allowing an attacker to execute arbitrary Python code...

ReviewBoard and Djblets library are vulnerable to code execution

An eval vulnerability exists in Python Software Foundation Djblets version before 0.6.30 and 0.7.0 before 0.7.19 and Beanbag Review Board before 1.7.15 when parsing JSON requests allowing an attacker to execute arbitrary Python code...

CVE-2013-4796

ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request...

Cross site request forgery (csrf)

ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request...

CVE-2013-4796

ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request...

CVE-2013-4796

CVE-2013-4796 concerns ReviewBoard 1.6.17. According to the Red Hat security entry and related sources in the connected documents, the issue enables code execution by attaching PHP scripts to a review request. The material does not provide vendor-specific affected versions beyond 1.6.17, nor does...

CVE-2013-4410

ReviewBoard: has an access-control problem in REST API...

Design/Logic Flaw

ReviewBoard: has an access-control problem in REST API...

CVE-2013-4410

ReviewBoard: has an access-control problem in REST API...

CVE-2013-4410

CVE-2013-4410 affects ReviewBoard with an access-control issue in its REST API. The NVD entry records a CVSS v3.1 base score of 7.5 (Network, Low attack complexity, No privileges required, Confidentiality impact High; others none). Public references describe the flaw as an access-control problem ...

Fedora 19 : ReviewBoard-1.7.27-1.fc19 (2014-8771)

New upstream security release 1.7.27 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.27 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Fedora Update for ReviewBoard FEDORA-2014-8771

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ReviewBoard FEDORA-2014-7348

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ReviewBoard FEDORA-2014-7333

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: ReviewBoard-1.7.26-2.fc20

Review Board is a powerful web-based code review tool that offers developers an easy way to handle code reviews. It scales well from small projects to large companies and offers a variety of tools to take much of the stress and time out of the code review process...

Fedora 19 : ReviewBoard-1.7.26-2.fc19 / python-django-evolution-0.6.9-4.fc19 (2014-7333)

Django Evolution: Drop back down to 0.6.9 as 0.7.x breaks Review Board upgrades. We'll support 0.7.x on Fedora 21 and EPEL 7 with Review Board 2.0 ReviewBoard: Address XSS vulnerabilities Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 20 : ReviewBoard-1.7.26-2.fc20 / python-django-evolution-0.6.9-4.fc20 (2014-7348)

Django Evolution: Drop back down to 0.6.9 as 0.7.x breaks Review Board upgrades. We'll support 0.7.x on Fedora 21 and EPEL 7 with Review Board 2.0 ReviewBoard: Address XSS vulnerabilities Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Review Board Search Field跨站脚本漏洞

Bugtraq ID:66275 ReviewBoard是开源代码审查应用程序。 由于程序没有正确过滤用户提交的输入，当用户浏览被影响的网站时，浏览器将执行攻击者提供的任意脚本代码，这可能导致攻击者窃取基于cookie的身份认证并发起其它攻击。 0 Review Board 1.7.22 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.reviewboard.org/...