VULNERABILITY INTELLIGENCE

CVE-2021-25313

CVSS score7.1 HIGH

EPSS probability1.50%

CISA KEVNot currently listed

Published2021-03-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Description

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rancher allows remote attackers to execute JavaScript via malicious links. This issue affects: SUSE Rancher Rancher versions prior to 2.5.6.

Weakness classification

meissner@suse.de: CWE-79

Primary references

meissner@suse.de — Issue Tracking, Vendor Advisory
meissner@suse.de — Issue Tracking, Third Party Advisory
meissner@suse.de — Release Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Third Party Advisory