PatchTheCVE: buildmasterhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-16520: Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listenehttps://patchthecve.com/cve/CVE-2017-16520.htmlhttps://patchthecve.com/cve/CVE-2017-16520.htmlWed, 17 Jun 2026 01:09:23 +0000HIGH 7.5: Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.CVE-2017-16761: An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to https://patchthecve.com/cve/CVE-2017-16761.htmlhttps://patchthecve.com/cve/CVE-2017-16761.htmlWed, 17 Jun 2026 01:09:52 +0000MEDIUM 6.1: An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.CVE-2017-16760: Inedo BuildMaster before 5.8.2 has XSS.https://patchthecve.com/cve/CVE-2017-16760.htmlhttps://patchthecve.com/cve/CVE-2017-16760.htmlWed, 17 Jun 2026 01:09:52 +0000MEDIUM 6.1: Inedo BuildMaster before 5.8.2 has XSS.CVE-2017-16521: In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.https://patchthecve.com/cve/CVE-2017-16521.htmlhttps://patchthecve.com/cve/CVE-2017-16521.htmlWed, 17 Jun 2026 01:09:23 +0000CRITICAL 9.8: In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.