Skip to content
OpenAdvisories

Package · PyPI

reviewboard

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2013-4409

    ReviewBoard and Djblets library are vulnerable to code execution

    An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

    Python Software Foundation; Beanbag Review Board Djblets djblets PyPI
  • Medium 6.1
    CVE-2013-2209

    Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown

    Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name.

    reviewboard PyPI