CVE-2024-53862
4 advisories.
Go/github.com/argoproj/argo-workflows/v3 CVE-2024-53862: high 7.5, EPSS 0.66%
Access to Archived Argo Workflows with Fake Token in `client` mode
Action: Upgrade github.com/argoproj/argo-workflows/v3 to 3.5.13 or later.
go get github.com/argoproj/argo-workflows/v3@v3.5.13go get github.com/argoproj/argo-workflows/v3@v3.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.5.7 | 3.5.13 | - |
| 3.6.0 | 3.6.2 | - |
Fixed versions
| 3.5.13 | 3.6.2 |
Sources
- osv: GHSA-h36c-m3rf-34h9
- nvd: CVE-2024-53862
- https://github.com/argoproj/argo-workflows/security/advisories/GHSA-h36c-m3rf-34h9
- https://github.com/argoproj/argo-workflows/pull/13021/files#diff-a5b255abaceddc9cc20bf6da6ae92c3a5d3605d94366af503ed754c079a1171aL668-R715
- https://github.com/argoproj/argo-workflows
CVE-2024-53862 · published · modified · JSON
Go/github.com/argoproj/argo-workflows CVE-2024-53862: high 7.5, EPSS 0.66%
Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-3303
- nvd: CVE-2024-53862
- https://github.com/argoproj/argo-workflows/pull/13021/files#diff-a5b255abaceddc9cc20bf6da6ae92c3a5d3605d94366af503ed754c079a1171aL668-R715
- https://github.com/argoproj/argo-workflows/security/advisories/GHSA-h36c-m3rf-34h9
CVE-2024-53862 · published · modified · JSON
Go/github.com/argoproj/argo-workflows/v2 CVE-2024-53862: high 7.5, EPSS 0.66%
Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-3303#Go/github.com/argoproj/argo-workflows/v2
- nvd: CVE-2024-53862
- https://github.com/argoproj/argo-workflows/pull/13021/files#diff-a5b255abaceddc9cc20bf6da6ae92c3a5d3605d94366af503ed754c079a1171aL668-R715
- https://github.com/argoproj/argo-workflows/security/advisories/GHSA-h36c-m3rf-34h9
CVE-2024-53862 · published · modified · JSON
Go/github.com/argoproj/argo-workflows/v3 CVE-2024-53862: high 7.5, EPSS 0.66%
Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
Action: Upgrade github.com/argoproj/argo-workflows/v3 to 3.5.13 or later.
go get github.com/argoproj/argo-workflows/v3@v3.5.13go get github.com/argoproj/argo-workflows/v3@v3.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.5.7 | 3.5.13 | - |
| 3.6.0-rc1 | 3.6.2 | - |
Fixed versions
| 3.5.13 | 3.6.2 |
Sources
- osv: GO-2024-3303#Go/github.com/argoproj/argo-workflows/v3
- nvd: CVE-2024-53862
- https://github.com/argoproj/argo-workflows/pull/13021/files#diff-a5b255abaceddc9cc20bf6da6ae92c3a5d3605d94366af503ed754c079a1171aL668-R715
- https://github.com/argoproj/argo-workflows/security/advisories/GHSA-h36c-m3rf-34h9
CVE-2024-53862 · published · modified · JSON