CVE-2014-5027: XSS
Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page.
Other sources
The 1.7.27 release of Review Board fixes the following flaws:
CVE-2014-5027:
"" Fixed a vulnerability where a URL to a diff fragment could be crafted that would inject custom HTML into the page. An attacker could send such a URL to another user and execute code in their browser session. ""
and CVE-2014-5028:
"" The Original File and Patched File resources could be used to access files on a private review request that the user did not have access to, if they knew the approciate database IDs. ""
Version 1.7.27 is already in Fedora testing.
References:
https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27/ http://seclists.org/oss-sec/2014/q3/207
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5027?
CVE-2014-5027 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2014-5027?
To fix CVE-2014-5027, upgrade Review Board to version 1.7.27 or 2.0.4 or later.
Which versions of Review Board are affected by CVE-2014-5027?
CVE-2014-5027 affects Review Board versions 1.7.x before 1.7.27 and 2.0.x before 2.0.4.
What type of attacks can CVE-2014-5027 be exploited for?
CVE-2014-5027 can be exploited for cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary scripts.
Is there a workaround for CVE-2014-5027 while waiting for a patch?
There are no known workarounds for CVE-2014-5027; upgrading to a fixed version is the only effective solution.