Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
18 vulnerabilities by inedo
CVE-2025-47244 (GCVE-0-2025-47244)
Vulnerability from nvd – Published: 2025-05-03 00:00 – Updated: 2025-05-05 14:21
VLAI
EPSS
VEX
Summary
Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb) or obtaining potentially sensitive information. Exploitation can occur if Anonymous access is enabled, or if there is a successful CSRF attack.
Severity
7.3 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Assigner
References
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-47244",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-05T14:21:11.874390Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-05T14:21:24.798Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "ProGet",
"vendor": "Inedo",
"versions": [
{
"lessThanOrEqual": "2024.22",
"status": "affected",
"version": "5",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:inedo:proget:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2024.22",
"versionStartIncluding": "5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb) or obtaining potentially sensitive information. Exploitation can occur if Anonymous access is enabled, or if there is a successful CSRF attack."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-03T22:44:08.250Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://seclists.org/fulldisclosure/2025/Apr/30"
},
{
"url": "https://forums.inedo.com"
},
{
"url": "https://docs.inedo.com/docs/proget/installation/installation-guide"
},
{
"url": "https://my.inedo.com/downloads/installers?product=ProGet"
}
],
"x_generator": {
"engine": "enrichogram 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2025-47244",
"datePublished": "2025-05-03T00:00:00.000Z",
"dateReserved": "2025-05-03T00:00:00.000Z",
"dateUpdated": "2025-05-05T14:21:24.798Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-15608 (GCVE-0-2017-15608)
Vulnerability from nvd – Published: 2018-09-26 21:00 – Updated: 2024-08-05 19:57
VLAI
EPSS
VEX
Summary
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/PG-1118 | x_refsource_CONFIRM |
| https://inedo.com/blog/proget-50-beta5-released | x_refsource_CONFIRM |
Date Public
2018-09-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:57:27.474Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/PG-1118"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/proget-50-beta5-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-09-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-09-26T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/PG-1118"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/proget-50-beta5-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-15608",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/PG-1118",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/PG-1118"
},
{
"name": "https://inedo.com/blog/proget-50-beta5-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/proget-50-beta5-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-15608",
"datePublished": "2018-09-26T21:00:00.000Z",
"dateReserved": "2017-10-19T00:00:00.000Z",
"dateUpdated": "2024-08-05T19:57:27.474Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-17086 (GCVE-0-2017-17086)
Vulnerability from nvd – Published: 2017-12-01 08:00 – Updated: 2024-08-05 20:43
VLAI
EPSS
VEX
Summary
Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/ILIB-11 | x_refsource_CONFIRM |
Date Public
2017-12-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:43:59.228Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-12-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Indeo Otter through 1.7.4 mishandles a \"\u003c/script\u003e\" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-12-01T07:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-17086",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Indeo Otter through 1.7.4 mishandles a \"\u003c/script\u003e\" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-17086",
"datePublished": "2017-12-01T08:00:00.000Z",
"dateReserved": "2017-12-01T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:43:59.228Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-15607 (GCVE-0-2017-15607)
Vulnerability from nvd – Published: 2017-12-01 08:00 – Updated: 2024-08-05 19:57
VLAI
EPSS
VEX
Summary
Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/OT-181 | x_refsource_CONFIRM |
| https://inedo.com/blog/otter-174-released | x_refsource_CONFIRM |
Date Public
2017-12-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:57:27.412Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/OT-181"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/otter-174-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-12-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving \u0027/\u0027 characters or initial \u0027.\u0027 characters, aka OT-181."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-12-01T07:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/OT-181"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/otter-174-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-15607",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving \u0027/\u0027 characters or initial \u0027.\u0027 characters, aka OT-181."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/OT-181",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/OT-181"
},
{
"name": "https://inedo.com/blog/otter-174-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/otter-174-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-15607",
"datePublished": "2017-12-01T08:00:00.000Z",
"dateReserved": "2017-10-19T00:00:00.000Z",
"dateUpdated": "2024-08-05T19:57:27.412Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-16520 (GCVE-0-2017-16520)
Vulnerability from nvd – Published: 2017-11-11 00:00 – Updated: 2024-08-05 20:27
VLAI
EPSS
VEX
Summary
Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/BM-3107 | x_refsource_CONFIRM |
| https://inedo.com/blog/buildmaster-582-released | x_refsource_CONFIRM |
| https://inedo.com/buildmaster/versions#v5.8 | x_refsource_CONFIRM |
Date Public
2017-11-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:27:03.434Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3107"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-11T00:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3107"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16520",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/BM-3107",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3107"
},
{
"name": "https://inedo.com/blog/buildmaster-582-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"name": "https://inedo.com/buildmaster/versions#v5.8",
"refsource": "CONFIRM",
"url": "https://inedo.com/buildmaster/versions#v5.8"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16520",
"datePublished": "2017-11-11T00:00:00.000Z",
"dateReserved": "2017-11-03T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:27:03.434Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-16761 (GCVE-0-2017-16761)
Vulnerability from nvd – Published: 2017-11-10 09:00 – Updated: 2024-08-05 20:35
VLAI
EPSS
VEX
Summary
An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://inedo.com/blog/buildmaster-582-released | x_refsource_CONFIRM |
| https://inedo.com/buildmaster/versions#v5.8 | x_refsource_CONFIRM |
| https://inedo.myjetbrains.com/youtrack/issue/BM-3101 | x_refsource_CONFIRM |
Date Public
2017-11-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:35:20.907Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3101"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-10T08:57:02.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3101"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16761",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.com/blog/buildmaster-582-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"name": "https://inedo.com/buildmaster/versions#v5.8",
"refsource": "CONFIRM",
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/BM-3101",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3101"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16761",
"datePublished": "2017-11-10T09:00:00.000Z",
"dateReserved": "2017-11-10T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:35:20.907Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-16760 (GCVE-0-2017-16760)
Vulnerability from nvd – Published: 2017-11-10 09:00 – Updated: 2024-08-05 20:35
VLAI
EPSS
VEX
Summary
Inedo BuildMaster before 5.8.2 has XSS.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/BM-3100 | x_refsource_CONFIRM |
| https://inedo.com/blog/buildmaster-582-released | x_refsource_CONFIRM |
Date Public
2017-11-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:35:20.790Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3100"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Inedo BuildMaster before 5.8.2 has XSS."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-10T08:57:02.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3100"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16760",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo BuildMaster before 5.8.2 has XSS."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/BM-3100",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3100"
},
{
"name": "https://inedo.com/blog/buildmaster-582-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/buildmaster-582-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16760",
"datePublished": "2017-11-10T09:00:00.000Z",
"dateReserved": "2017-11-10T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:35:20.790Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-16521 (GCVE-0-2017-16521)
Vulnerability from nvd – Published: 2017-11-10 09:00 – Updated: 2024-08-05 20:27
VLAI
EPSS
VEX
Summary
In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/EDO-3334 | x_refsource_MISC |
| https://gitlab.com/inedo/buildmaster/commit/4f4c7… | x_refsource_MISC |
| https://inedo.com/buildmaster/versions#v5.8 | x_refsource_MISC |
| https://inedo.myjetbrains.com/youtrack/issue/BM-3108 | x_refsource_MISC |
| https://inedo.com/blog/buildmaster-582-released | x_refsource_MISC |
Date Public
2017-11-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:27:03.625Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3108"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-10T08:57:02.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3108"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16521",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334",
"refsource": "MISC",
"url": "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334"
},
{
"name": "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721",
"refsource": "MISC",
"url": "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721"
},
{
"name": "https://inedo.com/buildmaster/versions#v5.8",
"refsource": "MISC",
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/BM-3108",
"refsource": "MISC",
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3108"
},
{
"name": "https://inedo.com/blog/buildmaster-582-released",
"refsource": "MISC",
"url": "https://inedo.com/blog/buildmaster-582-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16521",
"datePublished": "2017-11-10T09:00:00.000Z",
"dateReserved": "2017-11-03T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:27:03.625Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-14944 (GCVE-0-2017-14944)
Vulnerability from nvd – Published: 2017-09-29 19:00 – Updated: 2024-09-16 18:18
VLAI
EPSS
VEX
Summary
Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| http://inedo.com/blog/proget-4714-released | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:42:22.269Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://inedo.com/blog/proget-4714-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-29T19:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://inedo.com/blog/proget-4714-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-14944",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://inedo.com/blog/proget-4714-released",
"refsource": "CONFIRM",
"url": "http://inedo.com/blog/proget-4714-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-14944",
"datePublished": "2017-09-29T19:00:00.000Z",
"dateReserved": "2017-09-29T00:00:00.000Z",
"dateUpdated": "2024-09-16T18:18:47.120Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-47244 (GCVE-0-2025-47244)
Vulnerability from cvelistv5 – Published: 2025-05-03 00:00 – Updated: 2025-05-05 14:21
VLAI
EPSS
VEX
Summary
Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb) or obtaining potentially sensitive information. Exploitation can occur if Anonymous access is enabled, or if there is a successful CSRF attack.
Severity
7.3 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Assigner
References
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-47244",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-05T14:21:11.874390Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-05T14:21:24.798Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "ProGet",
"vendor": "Inedo",
"versions": [
{
"lessThanOrEqual": "2024.22",
"status": "affected",
"version": "5",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:inedo:proget:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2024.22",
"versionStartIncluding": "5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb) or obtaining potentially sensitive information. Exploitation can occur if Anonymous access is enabled, or if there is a successful CSRF attack."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-03T22:44:08.250Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://seclists.org/fulldisclosure/2025/Apr/30"
},
{
"url": "https://forums.inedo.com"
},
{
"url": "https://docs.inedo.com/docs/proget/installation/installation-guide"
},
{
"url": "https://my.inedo.com/downloads/installers?product=ProGet"
}
],
"x_generator": {
"engine": "enrichogram 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2025-47244",
"datePublished": "2025-05-03T00:00:00.000Z",
"dateReserved": "2025-05-03T00:00:00.000Z",
"dateUpdated": "2025-05-05T14:21:24.798Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-15608 (GCVE-0-2017-15608)
Vulnerability from cvelistv5 – Published: 2018-09-26 21:00 – Updated: 2024-08-05 19:57
VLAI
EPSS
VEX
Summary
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/PG-1118 | x_refsource_CONFIRM |
| https://inedo.com/blog/proget-50-beta5-released | x_refsource_CONFIRM |
Date Public
2018-09-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:57:27.474Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/PG-1118"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/proget-50-beta5-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-09-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-09-26T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/PG-1118"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/proget-50-beta5-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-15608",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/PG-1118",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/PG-1118"
},
{
"name": "https://inedo.com/blog/proget-50-beta5-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/proget-50-beta5-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-15608",
"datePublished": "2018-09-26T21:00:00.000Z",
"dateReserved": "2017-10-19T00:00:00.000Z",
"dateUpdated": "2024-08-05T19:57:27.474Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-17086 (GCVE-0-2017-17086)
Vulnerability from cvelistv5 – Published: 2017-12-01 08:00 – Updated: 2024-08-05 20:43
VLAI
EPSS
VEX
Summary
Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/ILIB-11 | x_refsource_CONFIRM |
Date Public
2017-12-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:43:59.228Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-12-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Indeo Otter through 1.7.4 mishandles a \"\u003c/script\u003e\" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-12-01T07:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-17086",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Indeo Otter through 1.7.4 mishandles a \"\u003c/script\u003e\" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-17086",
"datePublished": "2017-12-01T08:00:00.000Z",
"dateReserved": "2017-12-01T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:43:59.228Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-15607 (GCVE-0-2017-15607)
Vulnerability from cvelistv5 – Published: 2017-12-01 08:00 – Updated: 2024-08-05 19:57
VLAI
EPSS
VEX
Summary
Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/OT-181 | x_refsource_CONFIRM |
| https://inedo.com/blog/otter-174-released | x_refsource_CONFIRM |
Date Public
2017-12-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:57:27.412Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/OT-181"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/otter-174-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-12-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving \u0027/\u0027 characters or initial \u0027.\u0027 characters, aka OT-181."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-12-01T07:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/OT-181"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/otter-174-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-15607",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving \u0027/\u0027 characters or initial \u0027.\u0027 characters, aka OT-181."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/OT-181",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/OT-181"
},
{
"name": "https://inedo.com/blog/otter-174-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/otter-174-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-15607",
"datePublished": "2017-12-01T08:00:00.000Z",
"dateReserved": "2017-10-19T00:00:00.000Z",
"dateUpdated": "2024-08-05T19:57:27.412Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-16520 (GCVE-0-2017-16520)
Vulnerability from cvelistv5 – Published: 2017-11-11 00:00 – Updated: 2024-08-05 20:27
VLAI
EPSS
VEX
Summary
Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/BM-3107 | x_refsource_CONFIRM |
| https://inedo.com/blog/buildmaster-582-released | x_refsource_CONFIRM |
| https://inedo.com/buildmaster/versions#v5.8 | x_refsource_CONFIRM |
Date Public
2017-11-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:27:03.434Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3107"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-11T00:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3107"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16520",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/BM-3107",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3107"
},
{
"name": "https://inedo.com/blog/buildmaster-582-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"name": "https://inedo.com/buildmaster/versions#v5.8",
"refsource": "CONFIRM",
"url": "https://inedo.com/buildmaster/versions#v5.8"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16520",
"datePublished": "2017-11-11T00:00:00.000Z",
"dateReserved": "2017-11-03T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:27:03.434Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-16760 (GCVE-0-2017-16760)
Vulnerability from cvelistv5 – Published: 2017-11-10 09:00 – Updated: 2024-08-05 20:35
VLAI
EPSS
VEX
Summary
Inedo BuildMaster before 5.8.2 has XSS.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/BM-3100 | x_refsource_CONFIRM |
| https://inedo.com/blog/buildmaster-582-released | x_refsource_CONFIRM |
Date Public
2017-11-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:35:20.790Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3100"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Inedo BuildMaster before 5.8.2 has XSS."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-10T08:57:02.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3100"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16760",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo BuildMaster before 5.8.2 has XSS."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/BM-3100",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3100"
},
{
"name": "https://inedo.com/blog/buildmaster-582-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/buildmaster-582-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16760",
"datePublished": "2017-11-10T09:00:00.000Z",
"dateReserved": "2017-11-10T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:35:20.790Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-16761 (GCVE-0-2017-16761)
Vulnerability from cvelistv5 – Published: 2017-11-10 09:00 – Updated: 2024-08-05 20:35
VLAI
EPSS
VEX
Summary
An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://inedo.com/blog/buildmaster-582-released | x_refsource_CONFIRM |
| https://inedo.com/buildmaster/versions#v5.8 | x_refsource_CONFIRM |
| https://inedo.myjetbrains.com/youtrack/issue/BM-3101 | x_refsource_CONFIRM |
Date Public
2017-11-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:35:20.907Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3101"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-10T08:57:02.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3101"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16761",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.com/blog/buildmaster-582-released",
"refsource": "CONFIRM",
"url": "https://inedo.com/blog/buildmaster-582-released"
},
{
"name": "https://inedo.com/buildmaster/versions#v5.8",
"refsource": "CONFIRM",
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/BM-3101",
"refsource": "CONFIRM",
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3101"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16761",
"datePublished": "2017-11-10T09:00:00.000Z",
"dateReserved": "2017-11-10T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:35:20.907Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-16521 (GCVE-0-2017-16521)
Vulnerability from cvelistv5 – Published: 2017-11-10 09:00 – Updated: 2024-08-05 20:27
VLAI
EPSS
VEX
Summary
In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://inedo.myjetbrains.com/youtrack/issue/EDO-3334 | x_refsource_MISC |
| https://gitlab.com/inedo/buildmaster/commit/4f4c7… | x_refsource_MISC |
| https://inedo.com/buildmaster/versions#v5.8 | x_refsource_MISC |
| https://inedo.myjetbrains.com/youtrack/issue/BM-3108 | x_refsource_MISC |
| https://inedo.com/blog/buildmaster-582-released | x_refsource_MISC |
Date Public
2017-11-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:27:03.625Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3108"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-10T08:57:02.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3108"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://inedo.com/blog/buildmaster-582-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16521",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334",
"refsource": "MISC",
"url": "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334"
},
{
"name": "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721",
"refsource": "MISC",
"url": "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721"
},
{
"name": "https://inedo.com/buildmaster/versions#v5.8",
"refsource": "MISC",
"url": "https://inedo.com/buildmaster/versions#v5.8"
},
{
"name": "https://inedo.myjetbrains.com/youtrack/issue/BM-3108",
"refsource": "MISC",
"url": "https://inedo.myjetbrains.com/youtrack/issue/BM-3108"
},
{
"name": "https://inedo.com/blog/buildmaster-582-released",
"refsource": "MISC",
"url": "https://inedo.com/blog/buildmaster-582-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16521",
"datePublished": "2017-11-10T09:00:00.000Z",
"dateReserved": "2017-11-03T00:00:00.000Z",
"dateUpdated": "2024-08-05T20:27:03.625Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-14944 (GCVE-0-2017-14944)
Vulnerability from cvelistv5 – Published: 2017-09-29 19:00 – Updated: 2024-09-16 18:18
VLAI
EPSS
VEX
Summary
Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| http://inedo.com/blog/proget-4714-released | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:42:22.269Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://inedo.com/blog/proget-4714-released"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-29T19:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://inedo.com/blog/proget-4714-released"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-14944",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://inedo.com/blog/proget-4714-released",
"refsource": "CONFIRM",
"url": "http://inedo.com/blog/proget-4714-released"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-14944",
"datePublished": "2017-09-29T19:00:00.000Z",
"dateReserved": "2017-09-29T00:00:00.000Z",
"dateUpdated": "2024-09-16T18:18:47.120Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}