{"action":"Upgrade github.com/rancher/rancher to 2.0.16 or later.","affected":[{"fixed":"2.0.16","introduced":"2.0.0"},{"fixed":"2.1.11","introduced":"2.1.0"},{"fixed":"2.2.5","introduced":"2.2.0"}],"component":"github.com/rancher/rancher","cve_ids":["CVE-2019-13209"],"ecosystem":"Go","epss":0.01099,"exploited":false,"fixed_versions":["2.0.16","2.1.11","2.2.5"],"ghsa_id":"GHSA-xhg2-rvm8-w2jh","id":"tcs_01M5KFS9CMPMJ6NJ8ZYENAW9BE","modified_at":"2026-09-10T03:49:14.900669706Z","published_at":"2021-05-18T15:42:40Z","references":["https://osv.dev/vulnerability/GHSA-xhg2-rvm8-w2jh","https://nvd.nist.gov/vuln/detail/CVE-2019-13209","https://github.com/rancher/rancher/commit/0ddffe484adccb9e37d9432e8e625d8ebbfb0088","https://forums.rancher.com/t/rancher-release-v2-2-5-addresses-rancher-cve-2019-13209/14801","https://github.com/rancher/rancher"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-xhg2-rvm8-w2jh","url":"https://osv.dev/vulnerability/GHSA-xhg2-rvm8-w2jh"}],"summary":"Rancher Vulnerable to Cross-site Request Forgery (CSRF)"}