NVD

Id
10780  
Name
CVE-2011-4312  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) diff viewer or (2) screenshot component.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-11-23  
Modified Date
2013-02-13  
Seq
2011-4312  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60546 10780 CVE-2011-4312 FEDORA-2011-15933  View
60547 10780 CVE-2011-4312 FEDORA-2011-15935  View
60548 10780 CVE-2011-4312 [oss-security] 20111115 CVE Request -- ReviewBoard v1.5.7 && v1.6.3 -- XSS in the commenting system (diff viewer and screenshot pages components)  View
60549 10780 CVE-2011-4312 [oss-security] 20111115 Re: CVE Request -- ReviewBoard v1.5.7 && v1.6.3 -- XSS in the commenting system (diff viewer and screenshot pages components)  View
60550 10780 CVE-2011-4312 http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.6.3/  View
60551 10780 CVE-2011-4312 50681  View
60552 10780 CVE-2011-4312 https://bugzilla.redhat.com/show_bug.cgi?id=754126  View
60553 10780 CVE-2011-4312 https://github.com/reviewboard/reviewboard/commit/7a0a9d94555502278534dedcf2d75e9fccce8c3d  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32798 JVNDB-2011-003038 Review Board の commenting system におけるクロスサイトスクリプティングの脆弱性 Review Board の commenting system には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-4312 52219 CVE-2011-4312 10780 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003038.html 2011-11-15 2011-11-25 View