Lucene search

GoogleOSV:GO-2023-2050

HistoryAug 21, 2024 - 2:17 p.m.

Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

2024-08-2114:17:52

Google

osv.dev

argo cd

repo-server

denial of service

vulnerability

github

argoproj

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

26.7%

JSON

Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

References

github.com/argoproj/argo-cd/commit/1391ba72149655e4884d357586d3201f15bc92dc

github.com/argoproj/argo-cd/commit/b8f92c4ff226346624f43de3f25d81dac6386674

github.com/argoproj/argo-cd/releases/tag/v2.6.15

github.com/argoproj/argo-cd/releases/tag/v2.7.14

github.com/argoproj/argo-cd/releases/tag/v2.8.3

github.com/argoproj/argo-cd/security/advisories/GHSA-g687-f2gx-6wm8

nvd.nist.gov/vuln/detail/CVE-2023-40584

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

26.7%

JSON

Related for OSV:GO-2023-2050