Inedo

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Inedo records in CISA KEV

No Inedo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Buildmaster 4 records MEDIUM Otter 2 records MEDIUM Proget 2 records LOW

Records

2 records in Otter · all components

TI-2017-12538 CVE-2017-17086 · GHSA-9h5h-3fg4-h7h3

Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload…

MEDIUM 45

Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01393 Published 2017-12-01 No fix listed CWE-20

TI-2017-11399 CVE-2017-15607 · GHSA-m457-6c23-6275

Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors…

MEDIUM 45

Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01717 Published 2017-12-01 No fix listed CWE-22

Open these records in search →

Critical	3
High	3
Medium	3
Low	0
No CVSS	0