Skip to content
OpenAdvisories

Package · Go

github.com/rancher/rancher

60 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2019-11881 Public exploit

    Rancher Login Parameter Can Be Edited

    A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malici…