GHSA-xj7v-c82w-92q2MediumCVSS 6.5

Argo Exposure of Sensitive Information

Published
May 24, 2022
Last Modified
October 5, 2023

🔗 CVE IDs covered (1)

CVE-2018-21034 →

📋 Description

In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.

🎯 Affected products1

  • go/github.com/argoproj/argo-cd:< 1.5.0-rc1

🔗 References (7)