CVE-2017-16760

概要

参考情報

• inedo.com/blog/buildmaster-582-released · Release Notes
• inedo.myjetbrains.com/youtrack/issue/BM-3100 · Vendor Advisory

buildmaster のその他の脆弱性

• CVE-2017-16520高 7.5Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
• CVE-2017-16761中 6.1An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
• CVE-2017-16521緊急 9.8In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.