https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:45:53 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-67650 cnvd-2021-67650 https://cve.radiocsirt.org/vuln/cnvd-2021-67650 https://cve.radiocsirt.org/vuln/euvd-2026-30431 EUVD-2026-30431 https://cve.radiocsirt.org/vuln/euvd-2026-30431 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39133 <p>Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.14 and version 3.4.3, a user with `admin` access to the `system` resource type is potentially vulnerable to a CSRF attack that could cause the server to run untrusted code on all Rundeck editions. Patches are available in Rundeck versions 3.4.3 and 3.3.14.</p> <p>Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.14 and version 3.4.3, a user with `admin` access to the `system` resource type is potentially vulnerable to a CSRF attack that could cause the server to run untrusted code on all Rundeck editions. Patches are available in Rundeck versions 3.4.3 and 3.3.14.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39133 https://cve.radiocsirt.org/vuln/ghsa-3jmw-c69h-426c <p><strong>Affected:</strong> Maven: org.rundeck:rundeck-core</p> <p>### Impact</p> <p>A user with `admin` access to the `system` resource type is potentially vulnerable to a CSRF attack that could cause the server to run untrusted code on all Rundeck editions.</p> <p>### Patches Available in Rundeck 3.4.3 and 3.3.14</p> <p>### Workarounds</p> <p>Please visit [https://rundeck.com/security](https://rundeck.com/security) for information about specific workarounds.</p> <p>### For more information If you have any questions or comments about this advisory: * Email us at [security@rundeck.com](mailto:security@rundeck.com)</p> <p>To report security issues to Rundeck please use the form at [https://rundeck.com/security](https://rundeck.com/security)</p> <p><strong>Affected:</strong> Maven: org.rundeck:rundeck-core</p> <p>### Impact</p> <p>A user with `admin` access to the `system` resource type is potentially vulnerable to a CSRF attack that could cause the server to run untrusted code on all Rundeck editions.</p> <p>### Patches Available in Rundeck 3.4.3 and 3.3.14</p> <p>### Workarounds</p> <p>Please visit [https://rundeck.com/security](https://rundeck.com/security) for information about specific workarounds.</p> <p>### For more information If you have any questions or comments about this advisory: * Email us at [security@rundeck.com](mailto:security@rundeck.com)</p> <p>To report security issues to Rundeck please use the form at [https://rundeck.com/security](https://rundeck.com/security)</p> https://cve.radiocsirt.org/vuln/ghsa-3jmw-c69h-426c https://cve.radiocsirt.org/vuln/gsd-2021-39133 gsd-2021-39133 https://cve.radiocsirt.org/vuln/gsd-2021-39133