| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2023-47112 | Authenticated users can view job names and groups they do not have authorization to view in Rundeck | rundeck | rundeck | Medium | 4.3 | 2023-11-16 22:01:08 | Deep Dive |
| CVE-2023-48222 | Authenticated users can view or delete jobs they do not have authorization for in Rundeck | rundeck | rundeck | High | 8.1 | 2023-11-16 21:59:18 | Deep Dive |
| CVE-2022-41234 | Jenkins Rundeck Plugin 安全漏洞 | Jenkins project | Jenkins Rundeck Plugin | 高危 | - | 2022-09-21 15:45:54 | Deep Dive |
| CVE-2022-41233 | Jenkins Rundeck Plugin 安全漏洞 | Jenkins project | Jenkins Rundeck Plugin | 中危 | - | 2022-09-21 15:45:53 | Deep Dive |
| CVE-2022-31044 | Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation | rundeck | rundeck | High | 7.5 | 2022-06-15 19:00:22 | Deep Dive |
| CVE-2022-29186 | Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise | rundeck | rundeck | Critical | 9.1 | 2022-05-20 20:20:11 | Deep Dive |
| CVE-2022-30956 | Jenkins Rundeck Plugin 跨站脚本漏洞 | Jenkins project | Jenkins Rundeck Plugin | 中危 | - | 2022-05-17 14:06:25 | Deep Dive |
| CVE-2021-41112 | Missing Authorization in Rundeck | rundeck | rundeck | High | 8.1 | 2022-02-28 19:15:17 | Deep Dive |
| CVE-2021-41111 | Authorization Bypass Through User-Controlled Key in Rundeck | rundeck | rundeck | Medium | 6.4 | 2022-02-28 19:15:11 | Deep Dive |
| CVE-2021-39133 | Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server | rundeck | rundeck | High | 7.2 | 2021-08-30 19:50:10 | Deep Dive |
| CVE-2021-39132 | YAML deserialization can run untrusted code | rundeck | rundeck | High | 8.8 | 2021-08-30 19:35:10 | Deep Dive |
| CVE-2020-11009 | IDOR can reveal execution data and logs to unauthorized user in Rundeck | rundeck | rundeck | Medium | 6.5 | 2020-04-29 16:30:14 | Deep Dive |
| CVE-2020-2144 | CloudBees Jenkins Rundeck Plugin 代码问题漏洞 | Jenkins project | Jenkins Rundeck Plugin | 高危 | - | 2020-03-09 15:01:00 | Deep Dive |
| CVE-2019-16556 | CloudBees Jenkins Rundeck Plugin 安全漏洞 | Jenkins project | Jenkins Rundeck Plugin | 中危 | - | 2019-12-17 14:40:48 | Deep Dive |
| CVE-2019-10454 | CloudBees Jenkins Rundeck插件跨站请求伪造漏洞 | Jenkins project | Jenkins Rundeck Plugin | 中危 | - | 2019-10-16 13:00:53 | Deep Dive |
| CVE-2019-10455 | CloudBees Jenkins Rundeck Plugin 安全漏洞 | Jenkins project | Jenkins Rundeck Plugin | 中危 | - | 2019-10-16 13:00:53 | Deep Dive |