CVE-2017-16520

概要

参考情報

• inedo.com/blog/buildmaster-582-released · Vendor Advisory
• inedo.com/buildmaster/versions · Vendor Advisory
• inedo.myjetbrains.com/youtrack/issue/BM-3107 · Vendor Advisory

buildmaster のその他の脆弱性

• CVE-2017-16761中 6.1An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
• CVE-2017-16760中 6.1Inedo BuildMaster before 5.8.2 has XSS.
• CVE-2017-16521緊急 9.8In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.