Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Buildbot 安全漏洞
Vulnerability Description
Buildbot是一款软件开发持续集成工具。该产品主要用于软件的自动化构建、测试和发布。 Buildbot 1.8.1之前版本中的www/resource.py文件存在CRLF注入漏洞。远程攻击者可借助‘redirect’参数利用该漏洞造成Web缓存中毒，实施跨站脚本攻击，获取敏感信息或造成其他危害。
CVSS Information
N/A
Vulnerability Type
N/A