CVE-2017-16760

Description

References

• inedo.com/blog/buildmaster-582-released · Release Notes
• inedo.myjetbrains.com/youtrack/issue/BM-3100 · Vendor Advisory

buildmaster 的其他漏洞

• CVE-2017-16520高危 7.5Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
• CVE-2017-16761中危 6.1An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
• CVE-2017-16521严重 9.8In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.