VYPR
← All advisories
Moderate severityNVD Advisory· Published Aug 26, 2009· Updated Jun 16, 2026

CVE-2009-2967

CVE-2009-2967

Description

Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
buildbotPyPI
>= 0.7.6, < 0.7.11p30.7.11p3

Affected products

11
  • Buildbot/Buildbot10 versions
    cpe:2.3:a:buildbot:buildbot:0.7.10:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:buildbot:buildbot:0.7.10:*:*:*:*:*:*:*
    • cpe:2.3:a:buildbot:buildbot:0.7.10p1:*:*:*:*:*:*:*
    • cpe:2.3:a:buildbot:buildbot:0.7.11:*:*:*:*:*:*:*
    • cpe:2.3:a:buildbot:buildbot:0.7.11p1:*:*:*:*:*:*:*
    • cpe:2.3:a:buildbot:buildbot:0.7.11p2:*:*:*:*:*:*:*
    • cpe:2.3:a:buildbot:buildbot:0.7.6:*:*:*:*:*:*:*
    • cpe:2.3:a:buildbot:buildbot:0.7.7:*:*:*:*:*:*:*
    • cpe:2.3:a:buildbot:buildbot:0.7.8:*:*:*:*:*:*:*
    • cpe:2.3:a:buildbot:buildbot:0.7.9:*:*:*:*:*:*:*
    • (no CPE)range: >=0.7.6, <=0.7.11p2
  • ghsa-coords
    pkg:pypi/buildbot
    Range: >= 0.7.6, < 0.7.11p3

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.