Archive
4 September 2019
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 8.7
Rancher Vulnerable to Cross-site Request Forgery (CSRF)
Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hos…