CVE Feed

    Dashboard / CVE / CVE-2019-6804

    CVE-2019-6804

    An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.

    Published:Jan 25, 2019
    Last Modified:Nov 21, 2024
    EPS:Jan 25, 2019
    EPSS Score:0.09072
    CVSS Score:6.1

    Affected Products

    Vendor
    Pagerduty
    Product
    Rundeck

    Exploits

    https://www.exploit-db.com/exploits/46251/https://www.exploit-db.com/exploits/46251/https://www.exploit-db.com/exploits/46251

    Related CVEs

    CVE-2023-47112 (CVSS 4.3) — Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected …
    CVE-2023-48222 (CVSS 8.1) — Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected …
    CVE-2022-31044 (CVSS 7.5) — Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Stor…
    CVE-2022-29186 (CVSS 9.1) — Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck comm…
    CVE-2021-41112 (CVSS 8.1) — Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In versions …
    CVE-2021-41111 (CVSS 6.4) — Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to ver…
    CVE-2021-39133 (CVSS 7.2) — Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to ver…
    CVE-2021-39132 (CVSS 8.8) — Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to ver…
    CVE-2020-11009 (CVSS 6.5) — In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High