CVE-2023-48222

Summary

CVE-2023-48222 is a vulnerability affecting Rundeck, an open-source automation service. In impacted versions, authenticated users can gain unauthorized access to view or delete jobs by exploiting URL paths on two specific URLs. This issue, present in both Rundeck Open Source and Process Automation products, bypasses necessary authorization checks. The vulnerability has been mitigated in version 4.17.3, and users are urged to upgrade as soon as possible. Currently, there are no reported workarounds for this flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.