CVE-2023-32192CWE-80

Rancher API Server Cross-site Scripting Vulnerability

High · published October 16, 2024

CVSS v3.1
8.3
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in which unauthenticated cross-site

scripting (XSS) in the API Server's public API endpoint can be

exploited, allowing an attacker to execute arbitrary JavaScript code in the victim browser

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.4th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2024-10-16T12:23Z
EPSS history
Timeline
  • 16 OCT 12:23Z
    Rancher API Server Cross-site Scripting Vulnerability
    cvelistv5