Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2021-23347

Cross-site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
snyk

Description

The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scripting (XSS) the SSO provider connected to Argo CD would have to send back a malicious error message containing JavaScript to the user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a github.com/argoproj/argo-cd/cmd

  • unspecified to < 1.7.13affected
  • 1.8.0 to < unspecifiedaffected
  • unspecified to < 1.8.6affected

References