Go modules package
github.com/argoproj/argo-cd/v2/server
pkg:golang/github.com/argoproj/argo-cd/v2/server
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-37152 | — | >= 2.9.3, < 2.9.17 | 2.9.17 | Jun 6, 2024 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. This vulnerabil |
- CVE-2024-37152Jun 6, 2024affected >= 2.9.3, < 2.9.17fixed 2.9.17
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. This vulnerabil