Skip to content
OpenAdvisories

Package · Maven

org.rundeck:rundeck

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.1
    CVE-2023-48222

    Authenticated users can view or delete jobs they do not have authorization for in Rundeck

    Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions access to two URLs used in both Rundeck Open Source and Process Automation products could allow authenticated users to access the URL path, …

    rundeck rundeck org.rundeck:rundeck Maven
  • High 7.5
    CVE-2022-31044

    Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation

    Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibl…

    rundeck rundeck org.rundeck:rundeck Maven
  • Medium 6.5
    CVE-2020-11009

    IDOR can reveal execution data and logs to unauthorized user in Rundeck

    In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are not authorized to see. Depending on the configuration and the way that Rundeck is used, this could result in anything b…

    rundeck rundeck org.rundeck:rundeck Maven
  • Medium 6.1
    CVE-2019-6804 Public exploit

    Rundeck Community Edition vulnerable to Cross-site Scripting

    An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.

    org.rundeck:rundeck Maven