CVE-2021-41112

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In versions prior to 3.4.5, authenticated users could craft a request to modify or delete System or Project level Calendars, without appropriate authorization. Modifying or removing calendars could...

CVE-2021-41112

CVE-2021-41112 affects Rundeck prior to version 3.4.5. Authenticated users could craft requests to modify or delete System- or Project-level calendars without proper authorization, potentially causing scheduled jobs to run or be skipped on dates defined by calendars. The issue is fixed in 3.4.5; ...