Description
Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959.
References (9)
Core 9
Core References
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html
Patch, Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/2352
Product mailing-list
x_refsource_mlist
http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908130837o86b77d6y725233076286226f%40mail.gmail.com
Patch, Vendor Advisory x_refsource_confirm
http://buildbot.net/trac#SecurityAlert
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/36352
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/52896
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/36418
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/36100
Scores
EPSS
0.0226
EPSS Percentile
81.2%
Details
CWE
CWE-79
Status
published
Products (10)
buildbot/buildbot
0.7.6
buildbot/buildbot
0.7.7
buildbot/buildbot
0.7.8
buildbot/buildbot
0.7.9
buildbot/buildbot
0.7.10
buildbot/buildbot
0.7.10p1
buildbot/buildbot
0.7.11
buildbot/buildbot
0.7.11p1
buildbot/buildbot
0.7.11p2
pypi/buildbot
0.7.6 - 0.7.11p3PyPI
Published
Aug 26, 2009
Tracked Since
Feb 18, 2026