3 matches found
PT-2026-43032
OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...
CVE-2022-41354
An information disclosure flaw was found in Argo CD. This issue may allow unauthorized users to enumerate application names by inspecting API error messages and could use the discovered application names as the starting point of another attack. For example, the attacker might use their knowledge ...
Argo CD 安全漏洞
Argo is an open source container native workflow engine. A security vulnerability exists in Argo CD version 2.4.12 and earlier. An attacker exploited the vulnerability to enumerate application names...