Cross-site Scripting (XSS) Vulnerability in Rancher Versions Prior to 2.5.6

Cross-site Scripting (XSS) Vulnerability in Rancher Versions Prior to 2.5.6

CVE-2021-25313 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rancher allows remote attackers to execute JavaScript via malicious links. This issue affects: SUSE Rancher Rancher versions prior to 2.5.6.

Learn more about our Web App Pen Testing.