CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

Design/Logic Flaw

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster prior to 5.8.2 contains an Elevation of Privilege vulnerability: it does not properly restrict creation of RequireManageAllPrivileges event listeners, enabling an attacker to create event monitors. This is described across CVE-2017-16520 records and corroborated by CNVD-2017-364...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

Design/Logic Flaw

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

Cross site scripting

Inedo BuildMaster before 5.8.2 has XSS...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16521

Inedo BuildMaster prior to 5.8.2 uses XslTransform where XslCompiledTransform should have been used. Affects Inedo BuildMaster versions before 5.8.2; root cause is the use of a non-compiled XSLT path. The CVE details from multiple sources (NVD/NVD CVE-2017-16521) indicate high severity, with reme...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

CVE-2017-16761

CVE-2017-16761 is an Open Redirect vulnerability in Inedo BuildMaster before version 5.8.2 . Connected documents (CNVD-2017-36485, NVD/CVE entry) describe that a remote attacker can cause users to be redirected to arbitrary websites. The vulnerability is confirmed in BuildMaster's pre-5.8.2 relea...

CVE-2017-16760

Inedo BuildMaster is affected by a Cross‑Site Scripting (XSS) vulnerability in versions before 5.8.2. The CNVD entry states that a remote attacker could inject arbitrary web script or HTML, indicating a user‑triggered impact via the web interface. Public details identify BuildMaster prior to 5.8....