Go/github.com/rancher/rancher CVE-2019-13209: high 8.7, EPSS 1.10%
Rancher Vulnerable to Cross-site Request Forgery (CSRF)
Action: Upgrade github.com/rancher/rancher to 2.0.16 or later.
go get github.com/rancher/rancher@v2.0.16go get github.com/rancher/rancher@v2.1.11go get github.com/rancher/rancher@v2.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.16 | - |
| 2.1.0 | 2.1.11 | - |
| 2.2.0 | 2.2.5 | - |
Fixed versions
| 2.0.16 | 2.1.11 | 2.2.5 |
Sources
- osv: GHSA-xhg2-rvm8-w2jh
- https://nvd.nist.gov/vuln/detail/CVE-2019-13209
- https://github.com/rancher/rancher/commit/0ddffe484adccb9e37d9432e8e625d8ebbfb0088
- https://forums.rancher.com/t/rancher-release-v2-2-5-addresses-rancher-cve-2019-13209/14801
- https://github.com/rancher/rancher
CVE-2019-13209 · published · modified · JSON