cve.bz

CVE-2023-32192

8.3 highEPSS 0.4%

High (8.3). EPSS 0.4% chance of exploitation in the next 30 days. Fixed in github.com/rancher/apiserver 0.0.0-20240207153957-4fd7d821d952.

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in the API Server's public API endpoint can be exploited, allowing an attacker to execute arbitrary JavaScript code in the victim browser

Severity

CVSS 3.1

8.3 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
EPSS
0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE
CWE-80
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-833m-37f7-jq55Gogithub.com/rancher/apiserver<0.0.0-20240207153957-4fd7d821d9520.0.0-20240207153957-4fd7d821d952
GO-2024-2534Gogithub.com/rancher/apiserver<0.0.0-20240207153957-4fd7d821d9520.0.0-20240207153957-4fd7d821d952

References

Check your stackJSON