CVE-2022-43756 MEDIUM

CVE-2022-43756: Rancher/Wrangler: Denial of service when processing Git credentials

Vendor Suse
Product Rancher
Weakness CWE-74
Published February 7, 2023
Last update March 25, 2025
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

What the vulnerability does

01Description

A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in SUSE Rancher allows remote attackers to cause denial of service by supplying specially crafted git credentials. This issue affects: SUSE Rancher wrangler version 0.7.3 and prior versions; wrangler version 0.8.4 and prior versions; wrangler version 1.0.0 and prior versions.

Key dates

02Disclosure timeline

February 7, 2023 CVE published
March 25, 2025 Record updated