Filter
AND
Versions
Linuxfoundation Argo-cdArgo CD will blindly trust JWT claims if anonymous access is enabled
10
First published (updated )
Linuxfoundation Argo-cdImproper access control allows admin privilege escalation in Argo CD
9.9
First published (updated )
Linuxfoundation Argo-cdArgo CD's certificate verification is skipped for connections to OIDC providers
9.6
First published (updated )
Linuxfoundation Argo-cdArgo CD users with any cluster secret update access may update out-of-bounds cluster secrets
9.1
First published (updated )
Linuxfoundation Argo-cdJWT audience claim is not verified
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Linuxfoundation Argo-cdExternal URLs for Deployments can include javascript in argo-cd
First published (updated )
Linuxfoundation Argo-cdAll unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control …
First published (updated )
Linuxfoundation Argo-cdargo-cd Controller reconciles apps outside configured namespaces when sharding is enabled
8.6
First published (updated )
go/github.com/argoproj/argo-cd/v2Cross-Site Request Forgery (CSRF) in github.com/argoproj/argo-cd
8.4
EPSS
0.05%
First published (updated )
go/github.com/argoproj/argo-cd/v2Insecure entropy in argo-cd
8.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Linuxfoundation Argo-cdPath traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server
7.7
First published (updated )
go/github.com/argoproj/argo-cdArgo CD web terminal session doesn't expire
7.1
First published (updated )
Linuxfoundation Argo-cdPath traversal allows leaking out-of-bound files from Argo CD repo-server
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Linuxfoundation Argo-cdAny unprivileged user is able to deploy argocd in his namespace and with the created ServiceAccount …
6.5
First published (updated )
go/github.com/argoproj/argo-cd/v2Argo CD vulnerable to Uncontrolled Memory Consumption
6.5
First published (updated )
Linuxfoundation Argo-cdCross-site Scripting for Argo CD single sign on users
6.1
First published (updated )
Linuxfoundation Argo-cdPath traversal allows leaking out-of-bound Helm charts from Argo CD repo-server
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Linuxfoundation Argo-cdSymlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server
4.3
First published (updated )
Linuxfoundation Argo-cdArgo CD login screen allows message spoofing if SSO is enabled
4.3
First published (updated )
Linuxfoundation Argo-cdSymlink following allows leaking out-of-bounds YAML files from Argo CD repo-server
4.3
First published (updated )
Linuxfoundation Argo-cdAn access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate e…
4.3
First published (updated )