Inedo BuildMaster Open Redirect Vulnerability

BuildMaster is a modern application release automation tool for creating simple or complex release pipelines for any organizational need. An open redirection vulnerability exists in Inedo BuildMaster versions prior to 5.8.2. A remote attacker can exploit this vulnerability to redirect users to...

Inedo BuildMaster Elevation of Privilege Vulnerability

Inedo BuildMaster is a suite of automated deployment software from Inedo USA. The software integrates a variety of tools to automate the deployment of application suites. A security vulnerability exists in versions of Inedo BuildMaster prior to 5.8.2 that stems from the program failing to properl...

CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

Design/Logic Flaw

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520: Improper Privilege Management

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster prior to 5.8.2 contains an Elevation of Privilege vulnerability: it does not properly restrict creation of RequireManageAllPrivileges event listeners, enabling an attacker to create event monitors. This is described across CVE-2017-16520 records and corroborated by CNVD-2017-364...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

Cross site scripting

Inedo BuildMaster before 5.8.2 has XSS...

Design/Logic Flaw

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16761

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites...

CVE-2017-16760

Inedo BuildMaster is affected by a Cross‑Site Scripting (XSS) vulnerability in versions before 5.8.2. The CNVD entry states that a remote attacker could inject arbitrary web script or HTML, indicating a user‑triggered impact via the web interface. Public details identify BuildMaster prior to 5.8....

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16760

Inedo BuildMaster before 5.8.2 has XSS...

CVE-2017-16521

Inedo BuildMaster prior to 5.8.2 uses XslTransform where XslCompiledTransform should have been used. Affects Inedo BuildMaster versions before 5.8.2; root cause is the use of a non-compiled XSLT path. The CVE details from multiple sources (NVD/NVD CVE-2017-16521) indicate high severity, with reme...