Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Beanbag Review Board 跨站脚本漏洞
Vulnerability Description
Beanbag Review Board是美国Beanbag公司的一套开源的代码评审(review)工具。该工具包括服务器端程序(reveiwboard)和客户端命令行(RBTools)。 Review Board 1.6.21之前的1.6.x版本和1.7.17之前的1.7.x版本中存在跨站脚本漏洞,该漏洞源于程序没有正确过滤上传文件标题和‘Branch’字段。远程攻击者可通过创建特制的请求利用该漏洞注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A