Skip to content
OpenAdvisories

Package · Maven

org.rundeck:rundeck

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-11009

    IDOR can reveal execution data and logs to unauthorized user in Rundeck

    In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are not authorized to see. Depending on the configuration and the way that Rundeck is used, this could result in anything b…

    rundeck rundeck org.rundeck:rundeck Maven
  • Medium 6.1
    CVE-2019-6804 Public exploit

    Rundeck Community Edition vulnerable to Cross-site Scripting

    An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.

    org.rundeck:rundeck Maven