CVE-2013-2209

Published: Jul 31, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name.

Affected (32)

Products: Reviewboard: Review Board

Reviewboard

1 product

Review Board

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Reviewboard Review Board	Version 1.6.10
Reviewboard Review Board	Version 1.6.11
Reviewboard Review Board	Version 1.6.12
Reviewboard Review Board	Version 1.6.13
Reviewboard Review Board	Version 1.6.14
Reviewboard Review Board	Version 1.6.15
Reviewboard Review Board	Version 1.6.16
Reviewboard Review Board	Version 1.6.1
Reviewboard Review Board	Version 1.6.2
Reviewboard Review Board	Version 1.6.3
Reviewboard Review Board	Version 1.6.4
Reviewboard Review Board	Version 1.6.5
Reviewboard Review Board	Version 1.6.6
Reviewboard Review Board	Version 1.6.7
Reviewboard Review Board	Version 1.6.8
Reviewboard Review Board	Version 1.6.9
Reviewboard Review Board	Version 1.6
Reviewboard Review Board	Version 1.6 beta1
Reviewboard Review Board	Version 1.6 beta2
Reviewboard Review Board	Version 1.6 rc1
Reviewboard Review Board	Version 1.6 rc2

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Reviewboard Review Board	Version 1.7.0.1
Reviewboard Review Board	Version 1.7.0
Reviewboard Review Board	Version 1.7.1
Reviewboard Review Board	Version 1.7.2
Reviewboard Review Board	Version 1.7.3
Reviewboard Review Board	Version 1.7.4
Reviewboard Review Board	Version 1.7.5
Reviewboard Review Board	Version 1.7.6
Reviewboard Review Board	Version 1.7.7
Reviewboard Review Board	Version 1.7.8
Reviewboard Review Board	Version 1.7.9