Descrição
A path traversal vulnerability was found in Fleet-s ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service.
CVSS 5.3EPSS 0.292%Risco 0.54
Ver fonte- Publicação
- 2026-06-30 16:16:52
- Versões afetadas
- <0.12.17, <0.13.13, <0.14.8, <0.15.4
- Tipo
- Software crítico
- Vetor
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X