tocsin

CVE-2024-52284

2 advisories.

Go/github.com/rancher/fleet CVE-2024-52284: high 7.7, EPSS 0.24%

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text

Action: Upgrade github.com/rancher/fleet to 0.11.10 or later.

go get github.com/rancher/fleet@v0.13.1-0.20250806151509-088bcbea7edb
go get github.com/rancher/fleet@v0.12.6
go get github.com/rancher/fleet@v0.11.10

Affected

introducedfixedlast affected
0.13.00.13.1-0.20250806151509-088bcbea7edb-
0.12.00.12.6-
0.11.00.11.10-

Fixed versions

0.13.1-0.20250806151509-088bcbea7edb0.12.60.11.10

Sources

CVE-2024-52284 · published · modified · JSON

Go/github.com/rancher/fleet CVE-2024-52284: high 7.7, EPSS 0.24%

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet

Action: Upgrade github.com/rancher/fleet to 0.11.10 or later.

go get github.com/rancher/fleet@v0.11.10
go get github.com/rancher/fleet@v0.12.6
go get github.com/rancher/fleet@v0.13.1-0.20250806151509-088bcbea7edb

Affected

introducedfixedlast affected
0.11.00.11.10-
0.12.00.12.6-
0.13.00.13.1-0.20250806151509-088bcbea7edb-

Fixed versions

0.11.100.12.60.13.1-0.20250806151509-088bcbea7edb

Sources

CVE-2024-52284 · published · modified · JSON