SecPod Community › Forums › Critical Vulnerability and Exploit Exchange › CVE-2024-52799 : Argo Workflow Charts Vulnerability

Viewing 0 reply threads
  • Author
    Posts
    • December 9, 2024 at 7:28 am #6249
      saanidhyadwivedi
      Participant

        Prior to Argo Workflows 0.44.0, the workflow-role granted excessive privileges, including pod/exec creation, enabling arbitrary code execution. This vulnerability was fixed in version 0.44.0, affecting Helm Chart users.

        CVSS SCORE: 8.3

        • This topic was modified 2 weeks ago by Shreya.
    • Author
      Posts
    Viewing 0 reply threads
    • You must be logged in to reply to this topic.