Inedo BuildMaster before 5.8.2 has XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://inedo.myjetbrains.com/youtrack/issue/BM-3100 | vendor advisory |
https://inedo.com/blog/buildmaster-582-released | release notes vendor advisory |