{"id":"CVE-2019-6804","aliases":["GHSA-4262-wr7p-gpcj"],"url":"https://o3.security/vulnerability/CVE-2019-6804","summary":"Rundeck Community Edition vulnerable to Cross-site Scripting","details":"An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.","published":"2019-01-25T05:29:00.950Z","modified":"2026-07-08T20:29:47.183515Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":2,"affectedPackages":[{"ecosystem":"Maven","name":"org.rundeck:rundeck","fixedVersion":"3.0.13"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://docs.rundeck.com/docs/history/version-3.0.13.html"},{"type":"ADVISORY","url":"https://github.com/rundeck/rundeck/issues/4406"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/46251/"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T20:29:47.183515Z"}}