critical9.8
CVE-2017-16521
In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
Impact
In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inedo | Buildmaster | before 5.8.2 |
References
- NVD record
- CVE.org record
- https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721
- https://inedo.com/blog/buildmaster-582-released
- https://inedo.com/buildmaster/versions#v5.8
- https://inedo.myjetbrains.com/youtrack/issue/BM-3108
- https://inedo.myjetbrains.com/youtrack/issue/EDO-3334
- https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721
- https://inedo.com/blog/buildmaster-582-released
- https://inedo.com/buildmaster/versions#v5.8
- https://inedo.myjetbrains.com/youtrack/issue/BM-3108
- https://inedo.myjetbrains.com/youtrack/issue/EDO-3334