This host is installed with Buildbot and is prone to Cross Site Scripting vulnerability.

Successful exploitation will allow attacker to inject arbitrary web script or HTML via unspecified vectors and conduct cross-site scripting attacks. Impact Level: Application

Upgrade to version 0.7.11p2 or later. http://sourceforge.net/projects/buildbot/

This flaw arise because user supplied data passed into the waterfall web status view in status/web/waterfall.py is not sanitised before being returned to the user.

Buildbot version 0.7.6 through 0.7.11p1 on all platforms.

• http://secunia.com/advisories/36352/
• http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com
• http://www.vupen.com/english/advisories/2009/2352

---

Updated on 2015-03-25