org.rundeck:rundeck (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.rundeck:rundeck, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-48222 — CVSS 8.1 (high): Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions access to two URLs…
• CVE-2022-31044 — CVSS 7.5 (high): Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin…
• CVE-2020-11009 — CVSS 6.5 (medium): In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are…
• CVE-2019-6804 — CVSS 6.1 (medium): An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEdito…