An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject code that is

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2022-43760 · Microsoft / collected KEV context

EUVD-2023-1680

GHSA-46v3-ggjg-qq3x

cve-program · CVE-2022-43760

• https://github.com/rancher/rancher/security/advisories/GHSA-46v3-ggjg-qq3x
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-43760

euvd · EUVD-2023-1680

• https://github.com/rancher/rancher/security/advisories/GHSA-46v3-ggjg-qq3x
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-43760

nvd · CVE-2022-43760

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-43760
• https://github.com/rancher/rancher/security/advisories/GHSA-46v3-ggjg-qq3x

osv · GHSA-46v3-ggjg-qq3x

• https://github.com/rancher/rancher/security/advisories/GHSA-46v3-ggjg-qq3x
• https://nvd.nist.gov/vuln/detail/CVE-2022-43760
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-43760
• https://github.com/rancher/rancher
• https://github.com/rancher/rancher/releases/tag/v2.6.13
• https://github.com/rancher/rancher/releases/tag/v2.7.4

No related operational record is retained in the current change model.