Cross-site scripting in public API in github.com/rancher/norman
Cross-site scripting in public API in github.com/rancher/norman
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32193US | — | — | ||
A vulnerability has been identified in which unauthenticated cross-site
scripting (XSS) in Norman's public API endpoint can be exploited. This
can lead to an attacker exploiting… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/rancher/norman/commit/3bb70b772b52297feac64f5fdeb1b13c06c37e39FIX
- https://github.com/rancher/norman/commit/7b2b467995e6dfab6d4a5dee8dffc15033ae8269FIX
- https://github.com/rancher/norman/commit/a6a6cf5696088c32002953d36b75bdcc84f2399eFIX
- https://github.com/rancher/norman/commit/bd13c653293b9b5e0b37e8a6ccd1c3277f4623edFIX
- https://github.com/rancher/norman/commit/cb54924f25c7666511a913cd41834299ef22dba4FIX
- https://github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan