Podatność CVE-2013-4795

Podatność CVE-2013-4795

Publikacja: 2014-04-11

Opis:

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Reviewboard -> Review board

http://xforce.iss.net/xforce/xfdb/86410

http://www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard

http://www.securityfocus.com/bid/61750

http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.12

http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.18

http://secunia.com/advisories/54272

http://seclists.org/bugtraq/2013/Aug/69

http://osvdb.org/show/osvdb/96170