First published: Fri Nov 15 2013(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Reviewboard Review Board | =1.6 | |
Reviewboard Review Board | =1.6-beta1 | |
Reviewboard Review Board | =1.6-beta2 | |
Reviewboard Review Board | =1.6-rc1 | |
Reviewboard Review Board | =1.6-rc2 | |
Reviewboard Review Board | =1.6.1 | |
Reviewboard Review Board | =1.6.2 | |
Reviewboard Review Board | =1.6.3 | |
Reviewboard Review Board | =1.6.4 | |
Reviewboard Review Board | =1.6.5 | |
Reviewboard Review Board | =1.6.6 | |
Reviewboard Review Board | =1.6.7 | |
Reviewboard Review Board | =1.6.8 | |
Reviewboard Review Board | =1.6.9 | |
Reviewboard Review Board | =1.6.10 | |
Reviewboard Review Board | =1.6.11 | |
Reviewboard Review Board | =1.6.12 | |
Reviewboard Review Board | =1.6.13 | |
Reviewboard Review Board | =1.6.14 | |
Reviewboard Review Board | =1.6.15 | |
Reviewboard Review Board | =1.6.16 | |
Reviewboard Review Board | =1.6.17 | |
Reviewboard Review Board | =1.6.18 | |
Reviewboard Review Board | =1.6.19 | |
Reviewboard Review Board | =1.6.20 | |
Reviewboard Review Board | =1.7.0 | |
Reviewboard Review Board | =1.7.0.1 | |
Reviewboard Review Board | =1.7.1 | |
Reviewboard Review Board | =1.7.2 | |
Reviewboard Review Board | =1.7.3 | |
Reviewboard Review Board | =1.7.4 | |
Reviewboard Review Board | =1.7.5 | |
Reviewboard Review Board | =1.7.6 | |
Reviewboard Review Board | =1.7.7 | |
Reviewboard Review Board | =1.7.8 | |
Reviewboard Review Board | =1.7.9 | |
Reviewboard Review Board | =1.7.10 | |
Reviewboard Review Board | =1.7.11 | |
Reviewboard Review Board | =1.7.12 | |
Reviewboard Review Board | =1.7.13 | |
Reviewboard Review Board | =1.7.14 | |
Reviewboard Review Board | =1.7.15 | |
Reviewboard Review Board | =1.7.16 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.