CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used

published November 10, 2017

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

⚠️ Oops! A little mix-up in BuildMaster’s code could lead to some unexpected behavior! Think of it like using a regular recipe instead of a gourmet one — the output might be okay, but it won’t be as efficient or effective as it could be! While there's no known exploitation yet, this flaw could result in performance issues or incorrect transformations, leaving your builds not quite up to snuff. Imagine chaos in your kitchen when a recipe calls for baking soda, but you grab salt instead!

Put simply

Think of it like using a regular recipe instead of a gourmet one — the output might be okay, but it won’t be as efficient or effective as it could be! The flaw lies in the use of XslTransform when XslCompiledTransform would have been ideal, potentially resulting in inefficient processing and incorrect output during XML transformations.

What to do

While there's no known exploitation yet, this flaw could result in performance issues or incorrect transformations, leaving your builds not quite up to snuff. Imagine chaos in your kitchen when a recipe calls for baking soda, but you grab salt instead! Upgrade to BuildMaster version 5.8.2 or later to fix this issue. Regularly review your transformation methods to ensure optimal performance and correctness! You've got this! With the right updates, you'll have your builds running smoothly in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02022 · 80.8th percentile
Published
2017-11-10T09:00Z
EPSS history
Timeline
  • 10 NOV 09:00Z
    In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used
    cvelistv5