CVE-2013-2209: XSS
A persistent / stored cross-site scripting (XSS) flaw was found in the way reviews dropdown of Review Board, a web-based code review tool, performed sanitization of certain user information (full name). A remote attacker could provide a specially-crafted URL that, when visited would lead to arbitrary HTML or web script execution in the context of Review Board user's session.
References: [1] http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.10/ [2] http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.17/ [3] http://www.reviewboard.org/news/2013/06/22/review-board-1617-and-1710-released/
Other sources
Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2209?
CVE-2013-2209 is classified as a medium severity vulnerability due to its impact on user data through stored cross-site scripting.
How do I fix CVE-2013-2209?
To remediate CVE-2013-2209, upgrade Review Board to version 1.7.10 or 1.6.17 or later.
What versions of Review Board are affected by CVE-2013-2209?
CVE-2013-2209 affects Review Board versions prior to 1.7.10 and 1.6.17.
What type of vulnerability is CVE-2013-2209?
CVE-2013-2209 is a persistent or stored cross-site scripting (XSS) vulnerability.
Can an attacker exploit CVE-2013-2209 remotely?
Yes, a remote attacker can exploit CVE-2013-2209 by sending a specially-crafted URL to users.