Vendor
high
advisory
OS Command Injection in Rundeck via CLIUtils
1 TTP 1 CVEAuthenticated users can execute arbitrary OS commands on Windows nodes in Rundeck versions prior to 6.2.0 by injecting shell metacharacters into job options.
Rundeck
remote-code-execution
command-injection
vulnerability
1t
1c
high
advisory
Authorization Bypass in Rundeck Project Archive Import
1 TTP 1 CVERundeck versions through 6.2.1 contain an authorization vulnerability in the project archive import endpoint allowing low-privileged users to overwrite sensitive project configuration files.
Rundeck
1t
1c