CVE-2013-4519

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-19 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.

Affected products

ReviewBoard Review Board: 1.6, 1.6-beta1, 1.6-beta2, 1.6-rc1, 1.6-rc2, 1.6.1 (+37)

References

http://osvdb.org/99512
http://osvdb.org/99513
http://secunia.com/advisories/55623
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.21
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.17
http://www.securityfocus.com/bid/63601
https://exchange.xforce.ibmcloud.com/vulnerabilities/88620
http://osvdb.org/99512
http://osvdb.org/99513
http://secunia.com/advisories/55623
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.21
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.17

Get alerted when CVE-2013-4519 or the next vulnerability affects your stack