Vulnerabilities

TI-2017-12132 CVE-2017-16520 · GHSA-6wp7-j652-q3wq

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.

LOW 35

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2017-11-11 No fix listed CWE-269

TI-2017-12321 CVE-2017-16761 · GHSA-8qp4-8xw3-4g95

LOW 29

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01039 Published 2017-11-10 No fix listed CWE-601

TI-2017-12320 CVE-2017-16760 · GHSA-cgcw-6836-mc74

LOW 28

Inedo BuildMaster before 5.8.2 has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2017-11-10 No fix listed CWE-79

TI-2017-12133 CVE-2017-16521 · GHSA-m99p-q5j3-rj3r

MEDIUM 46

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02022 Published 2017-11-10 No fix listed