Cross-site Scripting Vulnerability in Rancher by SUSE

CVE-2022-43760

Summary

An improper neutralization of input during web page generation vulnerability in SUSE Rancher allows users in higher-privileged groups to inject malicious code. This code executes within the browser of another user, enabling attackers to potentially steal sensitive information, manipulate web content, or take other malicious actions impersonating the victims, especially if an administrator accesses the affected web page. This poses a significant risk to users with write access in the affected systems.

References