Skip to content
OpenAdvisories

Archive

4 September 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.7

    Rancher Vulnerable to Cross-site Request Forgery (CSRF)

    Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hos…