An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Link | Tags |
---|---|
https://inedo.com/blog/buildmaster-582-released | release notes vendor advisory |
https://inedo.com/buildmaster/versions#v5.8 | release notes vendor advisory |
https://inedo.myjetbrains.com/youtrack/issue/BM-3101 | vendor advisory |