Akuity Kargo vulnerabilities
- akuity kargo Kargo: Privilege escalation via Project RBAC management in the Kargo API 9.3 Critical
- akuity kargo Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter 5.1 Medium
- akuity kargo Kargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration 5.1 Medium
- akuity kargo Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints 9.4 Critical
- akuity kargo Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints 5.3 Medium
- akuity kargo Kargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated access 6.9 Medium