vulnerability

Beanbag Review Board: Information disclosure vulnerability (CVE-2014-5028)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:N/A:N)

Published

Mar 29, 2018

Added

Apr 30, 2018

Modified

Mar 30, 2026

Description

The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information from repository files by leveraging knowledge of database ids.

Solution

beanbag-review_board-upgrade-latest

References

CVE-2014-5028
https://attackerkb.com/topics/CVE-2014-5028
CWE-200
EUVD-EUVD-2014-4927
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-4927

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report