CVE-2013-4519: XSS
Published Nov 15, 2013
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.
Affected Software
43 affected components
ReviewBoard Review Board=1.6
ReviewBoard Review Board=1.6-beta1
ReviewBoard Review Board=1.6-beta2
ReviewBoard Review Board=1.6-rc1
ReviewBoard Review Board=1.6-rc2
ReviewBoard Review Board=1.6.1
ReviewBoard Review Board=1.6.2
ReviewBoard Review Board=1.6.3
ReviewBoard Review Board=1.6.4
ReviewBoard Review Board=1.6.5
ReviewBoard Review Board=1.6.6
ReviewBoard Review Board=1.6.7
ReviewBoard Review Board=1.6.8
ReviewBoard Review Board=1.6.9
ReviewBoard Review Board=1.6.10
ReviewBoard Review Board=1.6.11
ReviewBoard Review Board=1.6.12
ReviewBoard Review Board=1.6.13
ReviewBoard Review Board=1.6.14
ReviewBoard Review Board=1.6.15
ReviewBoard Review Board=1.6.16
ReviewBoard Review Board=1.6.17
ReviewBoard Review Board=1.6.18
ReviewBoard Review Board=1.6.19
ReviewBoard Review Board=1.6.20
ReviewBoard Review Board=1.7.0
ReviewBoard Review Board=1.7.0.1
ReviewBoard Review Board=1.7.1
ReviewBoard Review Board=1.7.2
ReviewBoard Review Board=1.7.3
ReviewBoard Review Board=1.7.4
ReviewBoard Review Board=1.7.5
ReviewBoard Review Board=1.7.6
ReviewBoard Review Board=1.7.7
ReviewBoard Review Board=1.7.8
ReviewBoard Review Board=1.7.9
ReviewBoard Review Board=1.7.10
ReviewBoard Review Board=1.7.11
ReviewBoard Review Board=1.7.12
ReviewBoard Review Board=1.7.13
ReviewBoard Review Board=1.7.14
ReviewBoard Review Board=1.7.15
ReviewBoard Review Board=1.7.16
Event History
Nov 15, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4519?
CVE-2013-4519 has a medium severity level due to its impact on web security allowing XSS attacks.
2
How do I fix CVE-2013-4519?
To fix CVE-2013-4519, upgrade Review Board to version 1.6.21 or later, or 1.7.17 or later.
3
What are the affected versions for CVE-2013-4519?
CVE-2013-4519 affects Review Board versions 1.6.x prior to 1.6.21 and 1.7.x prior to 1.7.17.
4
What types of vulnerabilities does CVE-2013-4519 include?
CVE-2013-4519 includes multiple cross-site scripting (XSS) vulnerabilities.
5
Who can exploit CVE-2013-4519?
CVE-2013-4519 can be exploited by remote attackers to inject arbitrary web script or HTML.