CVE-2021-25313

2021-03-0509:15:13

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

A Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Rancher allows remote attackers to execute JavaScript via malicious links. This issue affects: SUSE Rancher Rancher versions prior to 2.5.6.

CPENameOperatorVersion
ranchereq2.0.0-beta3-rc1
ranchereq2.1.0-rc5
ranchereq2.5.4-rc9
ranchereq2.0.0-alpha12
ranchereq2.5.0-alpha3
ranchereq2.0.5-rc6
ranchereq2.0.8-rc2
ranchereq2.0.0-alpha22
ranchereq2.0.5-rc2
ranchereq2.4.0-alpha1

Name	Operator	Version
rancher	eq	2.0.0-beta3-rc1
rancher	eq	2.1.0-rc5
rancher	eq	2.5.4-rc9
rancher	eq	2.0.0-alpha12
rancher	eq	2.5.0-alpha3
rancher	eq	2.0.5-rc6
rancher	eq	2.0.8-rc2
rancher	eq	2.0.0-alpha22
rancher	eq	2.0.5-rc2
rancher	eq	2.4.0-alpha1