CVE-2023-32193
2 advisories.
Go/github.com/rancher/norman CVE-2023-32193: high 8.3, EPSS 0.47%
Norman API Cross-site Scripting Vulnerability
Action: Upgrade github.com/rancher/norman to 0.0.0-20240207153100-3bb70b772b52 or later.
go get github.com/rancher/norman@v0.0.0-20240207153100-3bb70b772b52Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20240207153100-3bb70b772b52 |
Sources
- osv: GHSA-r8f4-hv23-6qp6
- https://github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6
- https://nvd.nist.gov/vuln/detail/CVE-2023-32193
- https://github.com/rancher/norman/commit/3bb70b772b52297feac64f5fdeb1b13c06c37e39
- https://github.com/rancher/norman/commit/7b2b467995e6dfab6d4a5dee8dffc15033ae8269
- https://github.com/rancher/norman/commit/a6a6cf5696088c32002953d36b75bdcc84f2399e
- https://github.com/rancher/norman/commit/bd13c653293b9b5e0b37e8a6ccd1c3277f4623ed
- https://github.com/rancher/norman/commit/cb54924f25c7666511a913cd41834299ef22dba4
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32193
- https://github.com/rancher/norman
CVE-2023-32193 · published · modified · JSON
Go/github.com/rancher/norman CVE-2023-32193: unknown, EPSS 0.47%
Cross-site scripting in public API in github.com/rancher/norman
Action: Upgrade github.com/rancher/norman to 0.0.0-20240207153100-3bb70b772b52 or later.
go get github.com/rancher/norman@v0.0.0-20240207153100-3bb70b772b52Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20240207153100-3bb70b772b52 |
Sources
- osv: GO-2024-2536
- https://github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6
- https://github.com/rancher/norman/commit/3bb70b772b52297feac64f5fdeb1b13c06c37e39
- https://github.com/rancher/norman/commit/7b2b467995e6dfab6d4a5dee8dffc15033ae8269
- https://github.com/rancher/norman/commit/a6a6cf5696088c32002953d36b75bdcc84f2399e
- https://github.com/rancher/norman/commit/bd13c653293b9b5e0b37e8a6ccd1c3277f4623ed
- https://github.com/rancher/norman/commit/cb54924f25c7666511a913cd41834299ef22dba4
CVE-2023-32193 · published · modified · JSON