Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

rundeck — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in rundeck, with AI-generated Chinese analysis, references, and POCs.

Vendor: rundeck

CVE IDTitleCVSSSeverityPublished
CVE-2023-47112 Authenticated users can view job names and groups they do not have authorization to view in Rundeck CWE-862 4.3 Medium2023-11-16
CVE-2023-48222 Authenticated users can view or delete jobs they do not have authorization for in Rundeck CWE-862 8.1 High2023-11-16
CVE-2022-31044 Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation CWE-256 7.5 High2022-06-15
CVE-2022-29186 Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise CWE-321 9.1 Critical2022-05-20
CVE-2021-41112 Missing Authorization in Rundeck CWE-862 8.1 High2022-02-28
CVE-2021-41111 Authorization Bypass Through User-Controlled Key in Rundeck CWE-639 6.4 Medium2022-02-28
CVE-2021-39133 Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server CWE-352 7.2 High2021-08-30
CVE-2021-39132 YAML deserialization can run untrusted code CWE-502 8.8 High2021-08-30
CVE-2020-11009 IDOR can reveal execution data and logs to unauthorized user in Rundeck CWE-200 6.5 Medium2020-04-29

All 9 known CVE vulnerabilities affecting rundeck with full Chinese analysis, references, and POCs where available.