DescriptionA Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler of SUSE Rancher allows remote attackers to inject commands in the underlying host via crafted commands passed to Wrangler. This issue affects: SUSE Rancher wrangler version 0.7.3 and prior versions; wrangler version 0.8.4 and prior versions; wrangler version 1.0.0 and prior versions.
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
|National Vulnerability Database||SUSE|
SUSE Security Advisories:
- GHSA-qrg7-hfx7-95c5, published Thu Jan 26 10:43:36 CET 2023
SUSE Timeline for this CVECVE page created: Tue Jun 7 17:46:59 2022
CVE page last modified: Thu Feb 9 14:27:43 2023