PatchTheCVEbuildmaster vulnerabilities and fixes
Recent CVEs affecting buildmaster, with upgrade or downgrade steps. 4 tracked.
buildmaster has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2017-11-11. Highest priority: CVE-2017-16521 (score 60/100).
- CVE-2017-16761 MEDIUM 6.1 UPGRADE An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to
- CVE-2017-16760 MEDIUM 6.1 UPGRADE Inedo BuildMaster before 5.8.2 has XSS.
- CVE-2017-16521 CRITICAL 9.8 UPGRADE In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
- CVE-2017-16520 HIGH 7.5 UPGRADE Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listene
FAQ
How do I fix buildmaster vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is buildmaster being exploited right now?
None of the tracked buildmaster CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which buildmaster CVE should I patch first?
CVE-2017-16521 currently ranks highest (60/100): In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used..