Rancher Cross-site Scripting Vulnerability

2022-05-2417:43:45

Google

osv.dev

0.001 Low

EPSS

Percentile

48.3%

JSON

A Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Rancher allows remote attackers to execute JavaScript via malicious links. This issue affects: SUSE Rancher Rancher versions prior to 2.5.6.

CPENameOperatorVersion
github.com/rancher/rancherge2.4.0
github.com/rancher/rancherge2.5.0
github.com/rancher/rancherlt2.5.6
github.com/rancher/rancherlt2.4.14
github.com/rancher/rancherlt2.3.11

Name	Operator	Version
github.com/rancher/rancher	ge	2.4.0
github.com/rancher/rancher	ge	2.5.0
github.com/rancher/rancher	lt	2.5.6
github.com/rancher/rancher	lt	2.4.14
github.com/rancher/rancher	lt	2.3.11