What is GHSA-53pj-67m4-9w98?

GHSA-53pj-67m4-9w98 is a security advisory published by GitHub Security Advisories with High severity. Rancher code injection via fluentd config commands

Which CVE IDs does GHSA-53pj-67m4-9w98 cover?

GHSA-53pj-67m4-9w98 covers the following CVE IDs: CVE-2019-12303. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-53pj-67m4-9w98?

GHSA-53pj-67m4-9w98 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-53pj-67m4-9w98?

GHSA-53pj-67m4-9w98 affects 1 product, including: go/github.com/rancher/rancher:\u003e= 2.0.0, \u003c= 2.2.3.

GHSA-53pj-67m4-9w98HighCVSS 8.8

Rancher code injection via fluentd config commands

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2019-12303 →

📋 Description

In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container.

🎯 Affected products1

go/github.com/rancher/rancher:>= 2.0.0, <= 2.2.3

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2019-12303
https://forums.rancher.com/t/rancher-release-v2-2-4-addresses-rancher-cve-2019-12274-and-cve-2019-12303/14466
https://github.com/advisories/GHSA-53pj-67m4-9w98