CVE-2019-6804

Опубликовано: 25 янв. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.

Ссылки

https://docs.rundeck.com/docs/history/version-3.0.13.html
Release Notes
Vendor Advisory
https://github.com/rundeck/rundeck/issues/4406
Third Party Advisory
https://www.exploit-db.com/exploits/46251/
Exploit
Third Party Advisory
VDB Entry
https://docs.rundeck.com/docs/history/version-3.0.13.html
Release Notes
Vendor Advisory
https://github.com/rundeck/rundeck/issues/4406
Third Party Advisory
https://www.exploit-db.com/exploits/46251/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pagerduty:rundeck:*:*:*:*:community:*:*:*

Версия до 3.0.13 (исключая)

EPSS

Процентиль: 92%

0.08615

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4262-wr7p-gpcj