Rancher Cross-site Scripting Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-25313 · ADVISORY
• rancher/rancher · WEB
• bugzilla.suse.com/show_bug.cgi · WEB
• rancher/rancher release v2.3.11 · WEB
• rancher/rancher release v2.4.14 · WEB
• rancher/rancher release v2.5.6 · WEB

github.com/rancher/rancher のその他の脆弱性

• CVE-2024-22031高 8.5A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a pro…
• CVE-2026-41053高 8.8Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principa…
• CVE-2026-41052高 8.8Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2…
• CVE-2026-44939緊急 9.4A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through …
• CVE-2026-25705高 8.4A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extens…