Skip to content
OpenAdvisories

Package · PyPI

djblets

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2013-4409

    ReviewBoard and Djblets library are vulnerable to code execution

    An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

    Python Software Foundation; Beanbag Review Board Djblets djblets PyPI
  • Medium 6.1
    CVE-2014-3994

    Djiblets Cross-site scripting Vulnerability via JSON Objects

    Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated …

    djblets PyPI
  • Medium 6.1
    CVE-2014-3995

    Djblets Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name.

    djblets PyPI