CVE-2021-25313
Fixed in a distro release EPSS 1%CVSS 7.1
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rancher allows remote attackers to execute JavaScript via malicious links. This issue affects: SUSE Rancher Rancher versions prior to 2.5.6.
Products: SUSE Rancher
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/rancher/rancher | 2.5.6 |
| Go | github.com/rancher/rancher | 2.4.14 |
| Go | github.com/rancher/rancher | 2.3.11 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | harvester | 0 |
| Chainguard | harvester-fips | 0 |
| Chainguard | harvester-fips-webhook | 0 |
| Chainguard | harvester-webhook | 0 |