CVE-2011-4312: XSS
A cross-site scripting (XSS) flaw was found in the way the commenting system of the ReviewBoard, a web-based code review tool, sanitized user input (new comments to be loaded). A remote attacker could provide a specially-crafted URL, which once visited by valid ReviewBoard user could lead to arbitrary HTML or web script execution in the 'diff viewer' or 'screenshot pages' components.
References: [1] http://www.reviewboard.org/news/ [2] http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.6.3/
Relevant upstream patch: [3] https://github.com/reviewboard/reviewboard/commit/7a0a9d94555502278534dedcf2d75e9fccce8c3d
Other sources
Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) diff viewer or (2) screenshot component.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4312?
CVE-2011-4312 is classified as a medium severity cross-site scripting (XSS) vulnerability affecting certain versions of Review Board.
How do I fix CVE-2011-4312?
To fix CVE-2011-4312, it is recommended to update your Review Board installation to version 1.6.3 or later.
What are the affected versions for CVE-2011-4312?
CVE-2011-4312 affects multiple versions of Review Board including 1.0, 1.5.x, and 1.6.x up to 1.6.2.
Can CVE-2011-4312 be exploited remotely?
Yes, CVE-2011-4312 can be exploited remotely by attackers through specially-crafted URLs targeting the vulnerable Review Board commenting system.
Is CVE-2011-4312 related to user input sanitization?
Yes, CVE-2011-4312 is caused by improper sanitization of user input in the Review Board commenting system.