CVE-2022-31249

CVE-2022-31249 (Rancher Wrangler) is an OS command injection vulnerability in the Wrangler component of SUSE Rancher. The issue arises from how Wrangler uses the host Git binary to perform operations, allowing remote attackers to pass specially crafted commands that are executed on the underlying...

CVE-2022-43756

CVE-2022-43756 is a DoS vulnerability in the Wrangler/ Rancher Git handling code caused by improper neutralization of input in Git credentials. Affected: SUSE Rancher Wrangler up to v0.7.3, Wrangler v0.8.4 and prior, Wrangler v1.0.0 and prior. Impact: remote attacker can trigger denial of service...