Go/github.com/argoproj/argo-cd CVE-2023-50726: medium 6.4, EPSS 0.53%
Users with `create` but not `override` privileges can perform local sync
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0-rc1 | - | 1.8.7 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g623-jcgg-mhmm
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-g623-jcgg-mhmm
- https://nvd.nist.gov/vuln/detail/CVE-2023-50726
- https://github.com/argoproj/argo-cd/commit/3b8f673f06c2d228e01cbc830e5cb57cef008978
- https://argo-cd.readthedocs.io/en/latest/operator-manual/rbac
- https://github.com/argoproj/argo-cd
CVE-2023-50726 · published · modified · JSON