Description
A vulnerability has been identified in which unauthenticated cross-site
scripting (XSS) in the API Server's public API endpoint can be
exploited, allowing an attacker to execute arbitrary JavaScript code in the victim browser
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | apiserver | < 0.0.0-20240207153957-4fd7d821d952 | 0.0.0-20240207153957-4fd7d821d952 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/apiserver | < 0.0.0-20240207153957-4fd7d821d952 | 0.0.0-20240207153957-4fd7d821d952 | GHSA-833m-37f7-jq55 |
Advisories 1
- WID-SEC-2024-0332 Rancher: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 8, 2024