CVE-2021-31330

Description

References

• mattschmidt.net/2021/04/14/review-board-xss-discovered · Exploit
• reviewboard.org/docs/releasenotes/reviewboard/3.0.21 · Release Notes
• reviewboard.org/docs/releasenotes/reviewboard/4.0-rc-2 · Release Notes
• reviewboard.org/news/2021/04/14/review-board-3-0-21-and-4-0-rc-2-security-bug-fixes-and-docker · Release Notes

Weitere Schwachstellen in review board

• CVE-2013-4409KRITISCH 9.8An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON request…
• CVE-2014-5028MITTEL 6.5The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to …
• CVE-2014-5027MITTEL 4.3Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitr…
• CVE-2013-4795MITTEL 4.3Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote at…
• CVE-2013-4519MITTEL 4.3Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to in…