medium6.1Public exploit code
CVE-2019-6804
An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/ex…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rundeck Community Edition < 3.0.13 - Persistent Cross-Site Scripting2019-01-28 · webapps · java
Impact
An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pagerduty | Rundeck | before 3.0.13 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.rundeck.com/docs/history/version-3.0.13.html
- https://github.com/rundeck/rundeck/issues/4406
- https://www.exploit-db.com/exploits/46251/
- https://docs.rundeck.com/docs/history/version-3.0.13.html
- https://github.com/rundeck/rundeck/issues/4406
- https://www.exploit-db.com/exploits/46251/