github.com/argoproj/argo-cd/v3 vulnerabilities (Go)
12 vulnerabilities.
-
github.com/argoproj/argo-cd/v3Go Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks 9.9 Critical -
github.com/argoproj/argo-cd/v3Go Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL 8.8 High -
github.com/argoproj/argo-cd/v3Go Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation 7.3 High -
github.com/argoproj/argo-cd/v3Go Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations 6.3 Medium -
github.com/argoproj/argo-cd/v3Go ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction 9.6 Critical -
github.com/argoproj/argo-cd/v3Go In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext... 7.7 High -
github.com/argoproj/argo-cd/v3Go Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook 7.5 High -
github.com/argoproj/argo-cd/v3Go argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload 7.5 High -
github.com/argoproj/argo-cd/v3Go Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload 7.5 High -
github.com/argoproj/argo-cd/v3Go Repository Credentials Race Condition Crashes Argo CD Server 6.5 Medium -
github.com/argoproj/argo-cd/v3Go Argo CD: Project API Token Exposes Repository Credentials 10.0 Critical -
github.com/argoproj/argo-cd/v3Go Argo CD allows cross-site scripting on repositories page 9.1 Critical