CVE-2017-16520
Published Nov 11, 2017Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
Vendor/product archive
4 CVEs tagged to inedo / buildmaster — 1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.
Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
Inedo BuildMaster before 5.8.2 has XSS.
In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.