-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from insufficient HTML sanitization in the tooltip rendering mechanism. The advisory explicitly states the fix involved replacing v-tooltip with v-clean-tooltip, indicating the original directive lacked proper sanitization. While exact code isn't provided, the context implies the v-tooltip implementation in the UI component handling cluster descriptions was directly responsible for unsafe HTML rendering. The confidence is high due to the direct correlation between the mitigation action (directive replacement) and the vulnerability type (XSS).
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/rancher/rancher | go | >= 2.9.0, < 2.9.4 | 2.9.4 |