CVE-2017-15608
Published Sep 26, 2018Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.
Vendor archive
inedo CVEs
Beta · best-effort8 CVEs tagged to vendor inedo — 3 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2017-17086
Published Dec 1, 2017Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecif…
CVE-2017-15607
Published Dec 1, 2017Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181.
CVE-2017-16520
Published Nov 11, 2017Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
CVE-2017-16761
Published Nov 10, 2017An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
CVE-2017-16760
Published Nov 10, 2017Inedo BuildMaster before 5.8.2 has XSS.
CVE-2017-16521
Published Nov 10, 2017In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
CVE-2017-14944
Published Sep 30, 2017Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.
Showing 1-8 of 8 CVEsPage 1 of 1