Privilege Escalation

github.com/rancher/rancher is vulnerable to Privilege Escalation. Users who have update access to a namespace can move it into a project they don’t have access to, giving them access to resources that are only available for that project, allowing access to project-specific resources (such as project secrets). However, resources in the namespace will now be included in the quota limit for the new project, which may cause denial of service conditions.