logo

Database

Authentication mechanism absence or evasion In github.com/argoproj/argo-cd/v2

Description

JWT audience claim is not verified in github.com/argoproj/argo-cd JWT audience claim is not verified in github.com/argoproj/argo-cd

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2023-224822. NVD-2023-224823. OSV-GO-2023-15204. OSV-2023-224825. GHSA-q9hr-j4rf-8fjc6. GCVE-2023-224827. GHSA-q9hr-j4rf-8fjc

References

1. https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.