1 matches found
Information Disclosure
github.com/argoproj/argo-cd is vulnerable to information disclosure. The vulnerability exists because the YAML-formatted secrets are mounted as files on the repo-server which allows a malicious attacker to read the contents of the files...