CVE-2021-39133
30.08.2021, 20:15
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.14 and version 3.4.3, a user with `admin` access to the `system` resource type is potentially vulnerable to a CSRF attack that could cause the server to run untrusted code on all Rundeck editions. Patches are available in Rundeck versions 3.4.3 and 3.3.14.
| Vendor | Product | Version |
|---|---|---|
| pagerduty | rundeck | 𝑥 < 3.3.14 |
| pagerduty | rundeck | 3.4.0 ≤ 𝑥 < 3.4.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References