CVE-2021-39132
1 advisory.
Maven/org.rundeck:rundeck-core CVE-2021-39132: high 8.8, EPSS 1.69%
YAML deserialization can run untrusted code
Action: Upgrade org.rundeck:rundeck-core to 3.3.14 (3.3.x) or 3.4.3 (3.4.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.4.0 | 3.4.3 | - |
| 0 | 3.3.14 | - |
Fixed versions
| 3.4.3 | 3.3.14 |
Sources
- osv: GHSA-q4rf-3fhx-88pf
- https://github.com/rundeck/rundeck/security/advisories/GHSA-q4rf-3fhx-88pf
- https://nvd.nist.gov/vuln/detail/CVE-2021-39132
- https://github.com/rundeck/rundeck/commit/850d12e21d22833bc148b7f458d7cb5949f829b6
- https://github.com/rundeck/rundeck
CVE-2021-39132 · published · modified · JSON