Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/07 10:20 p.m.7 views

CVE-2026-42880 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attacker with read-only access to extract plaintext...

9.6CVSS7.1AI score0.00506EPSS
SaveExploits2References9
Rows per page
Query Builder