GO-2022-0755

vendorUSosv

Cross-site request forgery in github.com/rancher/rancher

view advisory published 2021-05-18Licence: per source

Rancher 2 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-13209USmedium6.1—
Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victi…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan