CVE-2022-41354

CVE-2022-41354 concerns an information-disclosure vulnerability in Argo CD where an access-control flaw allows unauthenticated/unauthorized access to enumerate existing applications via the API. Affected: Argo CD before patches (notably v2.4.12 and earlier). Root cause: RBAC checks occur after fe...