What’s Vulnerable › Vulnerabilities
CVE-2017-16521
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-11-10 · updated 2026-06-17
Description
In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
Affected products
- Inedo Buildmaster: before 5.8.2 — fixed in 5.8.2
How to fix
Upgrade to a fixed version: Inedo Buildmaster 5.8.2. Check the vendor advisory for mitigations.
References
- https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721
- https://inedo.com/blog/buildmaster-582-released
- https://inedo.com/buildmaster/versions#v5.8
- https://inedo.myjetbrains.com/youtrack/issue/BM-3108
- https://inedo.myjetbrains.com/youtrack/issue/EDO-3334
- https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721
- https://inedo.com/blog/buildmaster-582-released
- https://inedo.com/buildmaster/versions#v5.8
- https://inedo.myjetbrains.com/youtrack/issue/BM-3108
- https://inedo.myjetbrains.com/youtrack/issue/EDO-3334
Get alerted when CVE-2017-16521 or the next vulnerability affects your stack