Skip to content
CVE PROGRAM SOURCE RECORD8.9 High

CVE-2024-52281

Stored Cross-site Scripting vulnerability in Rancher UI

Description

A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to perform a Stored XSS attack through the cluster description field. This issue affects rancher: from 2.9.0 before 2.9.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE rancher

Default version status: unaffected

  • 2.9.0 to < 2.9.4affected

References