Skip to content
OpenAdvisories

Package · Maven

org.rundeck:rundeck-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2021-39133

    Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server

    Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.14 and version 3.4.3, a user with `admin` access to the `system` resource type is potentially vulnerable to a CSRF attack that could cause t…

    rundeck rundeck org.rundeck:rundeck-core Maven
  • High 8.8
    CVE-2021-39132

    YAML deserialization can run untrusted code

    Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.14 and version 3.4.3, an authorized user can upload a zip-format plugin with a crafted plugin.yaml, or a crafted aclpolicy yaml file, or upl…

    rundeck rundeck org.rundeck:rundeck-core Maven