Description
In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.0.0, < 2.2.4 | 2.2.4 | GHSA-53pj-67m4-9w98 |
| Go | github.com/rancher/rancher | >= 2.0.0+incompatible, < 2.2.4+incompatible | 2.2.4+incompatible | GO-2024-2762 |