UpHeron
All vulnerabilities

Servers and applications

CVE-2022-43760

Multiple Cross-Site Scripting (XSS) issues in Rancher UI

Severity
High 8.4
Published
1 Jun 2023
Last changed
23 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.6.13, 2.7.4
Also known as
GHSA-46v3-ggjg-qq3x
Sources
NVD, Project advisories (GitHub)

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject code that is executed within another user's browser, allowing the attacker to steal sensitive information, manipulate web content, or perform other malicious activities on behalf of the victims. This could result in a…

Affected software

SoftwareAffected versions
RancherServers and applications · cpe:a:suse:rancher
  • From 2.6.0 before 2.6.13
  • From 2.7.0 before 2.7.4
RancherServers and applications · github:rancher/rancher
  • From 2.6.0 before 2.6.13
  • From 2.7.0 before 2.7.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-43760
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-43760
  • GitHub Advisory Database https://github.com/advisories/GHSA-46v3-ggjg-qq3x
  • github.com https://github.com/rancher/rancher/security/advisories/GHSA-46v3-ggjg-qq3x