CVE:CVE-2009-2959
CNNVD:CNNVD-200908-403
Buildbot 0.7.6到0.7.11补丁1版本中的waterfall web status view(status/web/waterfall.py)存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量，注入任意的web脚本或HTML。
solution:Upgrade buildbot buildbot to a higher version than 0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.10p1,0.7.11,0.7.11p1,and avoid the version 0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.10p1,0.7.11,0.7.11p1