Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

argo-cd — Vulnerabilities & Security Advisories 41

All 41 CVE vulnerabilities found in argo-cd, with AI-generated Chinese analysis, references, and POCs.

Vendor: argoproj

CVE IDTitleCVSSSeverityPublished
CVE-2022-31105 Argo CD's certificate verification is skipped for connections to OIDC providers CWE-295 8.3 High2022-07-12
CVE-2022-31036 Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server CWE-20 4.3 Medium2022-06-27
CVE-2022-31035 External URLs for Deployments can include javascript in argo-cd CWE-79 9.0 Critical2022-06-27
CVE-2022-31034 Insecure entropy in argo-cd CWE-330 8.3 High2022-06-27
CVE-2022-31016 Argo CD vulnerable to Uncontrolled Memory Consumption CWE-400 6.5 Medium2022-06-25
CVE-2022-29165 Argo CD will blindly trust JWT claims if anonymous access is enabled CWE-200 10.0 Critical2022-05-20
CVE-2022-24905 Argo CD login screen allows message spoofing if SSO is enabled CWE-20 4.3 Medium2022-05-20
CVE-2022-24904 Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server CWE-61 4.3 Medium2022-05-20
CVE-2022-24768 Improper access control allows admin privilege escalation in Argo CD CWE-200 9.9 Critical2022-03-23
CVE-2022-24731 Path traversal allows leaking out-of-bound files from Argo CD repo-server CWE-22 6.8 Medium2022-03-23
CVE-2022-24730 Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server CWE-22 7.7 High2022-03-23

All 41 known CVE vulnerabilities affecting argo-cd with full Chinese analysis, references, and POCs where available.