Unrated severityNVD Advisory· Published Apr 11, 2014· Updated May 6, 2026
CVE-2013-4795
CVE-2013-4795
Description
Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name.
Affected products
29cpe:2.3:a:reviewboard:review_board:1.6:*:*:*:*:*:*:*+ 28 more
- cpe:2.3:a:reviewboard:review_board:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.10:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.11:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.12:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.13:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.14:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.15:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.16:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.17:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6:beta1:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6:beta2:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6:rc1:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.6:rc2:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.10:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.11:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.7:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.8:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:review_board:1.7.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- osvdb.org/show/osvdb/96170nvd
- seclists.org/bugtraq/2013/Aug/69nvd
- secunia.com/advisories/54272nvd
- www.reviewboard.org/docs/releasenotes/reviewboard/1.6.18nvd
- www.reviewboard.org/docs/releasenotes/reviewboard/1.7.12nvd
- www.securityfocus.com/bid/61750nvd
- www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboardnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/86410nvd
News mentions
0No linked articles in our index yet.