In short
- CVE-2018-21034 is a MEDIUM (CVSS 6.5) vulnerability affecting github.com/argoproj/argo-cd, argo cd (argoproj).
- Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.0% of all vulnerabilities.
- Fix: update to 1.5.0-rc1 or later.
Description
In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.
NVD description
In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.
More vulnerabilities in github.com/argoproj/argo-cd
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free