ArgoCD
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-1025 | 0.5.0 through 2.1.12, 2.2.7, 2.3.1 | All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potent | HIGH 8.8 | 1.3 % | ||
| CVE-2021-3557 | argocd 1.1.1 | A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-arg | MEDIUM 6.5 | 0.8 % |