Buildbot

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Buildbot records in CISA KEV

No Buildbot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Buildbot 4 records MEDIUM

Records

4 records

TI-2019-09176 CVE-2019-12300 · GHSA-g86p-hgx5-2pfh

Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token…

MEDIUM 46

Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01841 Published 2019-05-23 Fixed in 1.8.2, 2.3.1 CWE-287

TI-2019-05201 CVE-2019-7313 · GHSA-66x7-2r56-fj77

www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of…

LOW 29

www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0087 Published 2019-02-03 Fixed in 1.8.1 CWE-93

TI-2009-02826 CVE-2009-2967 · GHSA-mj3x-wprp-mvj9

Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02265 Published 2009-08-26 Fixed in 0.7.11p3 CWE-79

TI-2009-02819 CVE-2009-2959 · GHSA-jqqh-999x-w26w

Cross-site scripting (XSS) vulnerability in the waterfall web status view…

LOW 24

Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vector…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02008 Published 2009-08-25 Fixed in 0.7.11p3 CWE-79

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0