CVE-2017-16520: Improper Privilege Management

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

PT-2017-14437

Name of the Vulnerable Software and Affected Versions BuildMaster versions prior to 5.8.2 Description The issue is related to the improper restriction of creation of RequireManageAllPrivileges event listeners. Recommendations For versions prior to 5.8.2, update to version 5.8.2 or later to resolv...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

Design/Logic Flaw

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

Cross site scripting

Inedo BuildMaster before 5.8.2 has XSS...

Open redirect

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16521

Inedo BuildMaster prior to 5.8.2 uses XslTransform where XslCompiledTransform should have been used. Affects Inedo BuildMaster versions before 5.8.2; root cause is the use of a non-compiled XSLT path. The CVE details from multiple sources (NVD/NVD CVE-2017-16521) indicate high severity, with reme...

CVE-2017-16760

Inedo BuildMaster is affected by a Cross‑Site Scripting (XSS) vulnerability in versions before 5.8.2. The CNVD entry states that a remote attacker could inject arbitrary web script or HTML, indicating a user‑triggered impact via the web interface. Public details identify BuildMaster prior to 5.8....

CVE-2017-16761

CVE-2017-16761 is an Open Redirect vulnerability in Inedo BuildMaster before version 5.8.2 . Connected documents (CNVD-2017-36485, NVD/CVE entry) describe that a remote attacker can cause users to be redirected to arbitrary websites. The vulnerability is confirmed in BuildMaster's pre-5.8.2 relea...

CVE-2017-16761: URL Redirection to Untrusted Site

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16521: Undefined Security Weakness

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

PT-2017-14542

Name of the Vulnerable Software and Affected Versions Inedo BuildMaster versions prior to 5.8.2 Description The issue is related to a cross-site scripting XSS problem. Recommendations For versions prior to 5.8.2, update to version 5.8.2 or later to resolve the issue...