CVE-2021-26923 | BDVDB-2026-150476 Detail

Description#

An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the system, and this endpoint is not protected with authentication.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4
https://github.com/argoproj/argo-cd/security/advisories/GHSA-pfgj-mh5m-2p48

Exploit#

No public exploit known

History#

Version 12021-03-15Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.