{"id":"CVE-2019-6804","aliases":["GHSA-4262-wr7p-gpcj"],"url":"https://o3.security/vulnerability/CVE-2019-6804","summary":"Rundeck Community Edition vulnerable to Cross-site Scripting","details":"An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.","published":"2019-01-25T05:29:00.950Z","modified":"2026-07-08T20:29:47.183515Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":2,"affectedPackages":[{"ecosystem":"Maven","name":"org.rundeck:rundeck","fixedVersion":"3.0.13"}],"fix":{"url":"https://github.com/rundeck/rundeck/commit/e992e94bba22d9fca3a669f0d02c85b80a19f848","label":"rundeck/rundeck@e992e94"},"references":[{"type":"ADVISORY","url":"https://docs.rundeck.com/docs/history/version-3.0.13.html"},{"type":"ADVISORY","url":"https://github.com/rundeck/rundeck/issues/4406"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/46251/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6804"},{"type":"WEB","url":"https://github.com/rundeck/rundeck/commit/e992e94bba22d9fca3a669f0d02c85b80a19f848"},{"type":"PACKAGE","url":"https://github.com/rundeck/rundeck"},{"type":"WEB","url":"https://www.exploit-db.com/exploits/46251"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T20:29:47.183515Z"}}