CVE-2013-4519

Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.

• CWE-79

• http://osvdb.org/99512
• http://osvdb.org/99513
• http://secunia.com/advisories/55623Vendor Advisory
• http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.21Vendor Advisory
• http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.17Vendor Advisory
• http://www.securityfocus.com/bid/63601
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88620
• http://osvdb.org/99512
• http://osvdb.org/99513
• http://secunia.com/advisories/55623Vendor Advisory
• http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.21Vendor Advisory
• http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.17Vendor Advisory
• http://www.securityfocus.com/bid/63601
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88620

Published

Nov 19, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4513Buffer overflow in the oz_cdev_write function in drivers/sta…
• CVE-2013-4514Multiple buffer overflows in drivers/staging/wlags49_h2/wl_p…
• CVE-2013-4515The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c…
• CVE-2013-4516The mp_get_count function in drivers/staging/sb105x/sb_pci_m…
• CVE-2013-4517Apache Santuario XML Security for Java before 1.5.6, when ap…
• CVE-2013-4518RHUI (Red Hat Update Infrastructure) 2.1.3 has world readabl…5.5
• CVE-2013-4520xslt.c in libxslt before 1.1.25 allows context-dependent att…
• CVE-2013-4521RichFaces implementation in Nuxeo Platform 5.6.0 before HF27…9.8
• CVE-2013-4522lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.1…
• CVE-2013-4523Cross-site scripting (XSS) vulnerability in message/lib.php …
• CVE-2013-4524Directory traversal vulnerability in repository/filesystem/l…
• CVE-2013-4525Cross-site scripting (XSS) vulnerability in mod/quiz/report/…