Rundeck Cross-Site Request Forgery Vulnerability

Rundeck is an open source automation service with a web console, command line tools and WebAPI from Rundeck, Inc. that is primarily used to run automation tasks. a cross-site request forgery vulnerability exists in Rundeck, which stems from the fact that users with access to the "system" resource type may be vulnerable to CSRF attacks, which could lead to server to run untrusted code on all Rundeck versions. No details of the vulnerability are currently available.