Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:35441
HistoryMay 09, 2022 - 3:58 a.m.

Privilege Escalation

2022-05-0903:58:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

0.002 Low

EPSS

Percentile

62.3%

JSON

github.com/argoproj/argo-workflows is vulnerable to privilege escalation. An attacker can create a workflow through the newHTTPServer function of argoserver.go that produces an HTML artifact and makes XRL calls to the Argo Server API by using a script, allowing the attacker to send malicious emails to that artifact with deep links, resulting in workflow modifications.

Related

prion 1
github 1
cve 1
gitlab 1
osv 3
cvelist 1
nvd 1
prion
prion
Hardcoded credentials
2022-05-06 00:15:00
github
github
Malicious HTML+XHR Artifact Privilege Escalation in Argo Workflows
2022-05-23 20:16:05
cve
cve
CVE-2022-29164
2022-05-06 00:15:07
gitlab
gitlab
Malicious HTML+XHR Artifact Privilege Escalation in Argo Workflows
2022-05-23 00:00:00
osv
osv
Malicious HTML+XHR Artifact Privilege Escalation in Argo Workflows
2022-05-23 20:16:05
BIT-argo-workflows-2022-29164
2024-03-06 10:50:37
CVE-2022-29164
2022-05-06 00:15:07
cvelist
cvelist
CVE-2022-29164 Privilege Escalation in argo-workflows
2022-05-05 23:15:12
nvd
nvd
CVE-2022-29164
2022-05-06 00:15:07

0.002 Low

EPSS

Percentile

62.3%

JSON
Related for VERACODE:35441
prion1github1cve1gitlab1osv3cvelist1nvd1