GO-2024-2536 Cross-site scripting in public API in github.com/rancher/norman

Cross-site scripting in public API in github.com/rancher/norman...

Cross Site Scripting (XSS)

github.com/rancher/norman is vulnerable to Cross Site Scripting XSS . The vulnerability is due to a lack of URL validation within the ParseRequestURL method. An attacker can execute arbitrary JavaScript by sending a crafted payload to a public API endpoint, resulting in XSS...