Vulnerabilities > Reviewboard > Djblets > 0.7.21

DATE CVE VULNERABILITY TITLE RISK
2019-11-04 CVE-2013-4409 Improper Input Validation vulnerability in multiple products
An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.
network
low complexity
reviewboard fedoraproject redhat CWE-20
7.5
7.5
2014-06-16 CVE-2014-3995 Cross-Site Scripting vulnerability in Reviewboard Djblets
Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name. 		4.3
4.3
2014-06-16 CVE-2014-3994 Cross-Site Scripting vulnerability in Reviewboard Djblets and Reviewboard
Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated by the name field when changing a user name. 		4.3
4.3