Lucene search
Veracode Vulnerability DatabaseVERACODE:21431HistorySep 05, 2019 - 3:55 a.m.
Cross-site Websocket Hijacking (CSWSH)
2019-09-0503:55:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
40.0%
github.com/rancher/rancher is vulnerable to cross-site websocket hijacking (CSWSH). It does not check the Origin header in the clients handshake request for trusted origin, allowing an attacker to send an authenticated request to Rancher Server using a Rancher with the privilege of a victim.
Related
osv
osv
Rancher Vulnerable to Cross-site Request Forgery (CSRF)
2021-05-18 15:42:40
CVE-2019-13209
2019-09-04 14:15:11
Cross-site request forgery in github.com/rancher/rancher
2021-05-18 15:42:40
cve
cve
CVE-2019-13209
2019-09-04 14:15:11
cvelist
cvelist
CVE-2019-13209
2019-09-04 13:40:18
github
github
Rancher Vulnerable to Cross-site Request Forgery (CSRF)
2021-05-18 15:42:40
nvd
nvd
CVE-2019-13209
2019-09-04 14:15:11
prion
prion
Cross site scripting
2019-09-04 14:15:00