Cross-site scripting in public API in github.com/rancher/norman
Cross-site scripting in public API in github.com/rancher/norman
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-32193US | — | — | ||
A vulnerability has been identified in which unauthenticated cross-site
scripting (XSS) in Norman's public API endpoint can be exploited. This
can lead to an attacker exploiting… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/rancher/norman/commit/3bb70b772b52297feac64f5fdeb1b13c06c37e39FIX
- https://github.com/rancher/norman/commit/7b2b467995e6dfab6d4a5dee8dffc15033ae8269FIX
- https://github.com/rancher/norman/commit/a6a6cf5696088c32002953d36b75bdcc84f2399eFIX
- https://github.com/rancher/norman/commit/bd13c653293b9b5e0b37e8a6ccd1c3277f4623edFIX
- https://github.com/rancher/norman/commit/cb54924f25c7666511a913cd41834299ef22dba4FIX
- https://github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan