VDB

CVE-2021-39133

CVE-2021-39133 PUBLISHED CVSS 7.199999809265137 HIGH

Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server

EPSS 0.15% · 34.9th percentile

Risk Scores

CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.15%
34.9th percentile

Affected Products

VendorProductVersions
pagerdutyrundeck0, 3.4.0
Mavenorg.rundeck:rundeck-core3.4.0, 0
rundeckrundeck< 3.3.14, >= 3.4.0, < 3.4.3

Timeline

  • Aug 30, 2021 CVE Published
  • Aug 31, 2021 EPSS Score
  • Oct 28, 2021 EPSS Score
  • Dec 25, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 21, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 20, 2022 EPSS Score
  • Jun 17, 2022 EPSS Score
  • Aug 15, 2022 EPSS Score
  • Oct 12, 2022 EPSS Score
  • Dec 9, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›