CVE-2021-25313: Suse Rancher

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rancher allows remote attackers to execute JavaScript via malicious links. This issue affects: SUSE Rancher Rancher versions prior to 2.5.6.

Affected products

• Suse Rancher: before 2.5.6 (fixed in 2.5.6)

Published 2021-03-05. Last modified 2026-06-17.