Executive brief
Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows
Affected products
- Go github.com/argoproj/argo-workflows/v3
- Go github.com/argoproj/argo-workflows/v2
- Go github.com/argoproj/argo-workflows
Junglewise Threat Intelligence
CVE-2021-37914: GO-2022-0928 - Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows
CVE-2021-37914 · Severity: info · Published 2024-08-21
Technologies: github.com/argoproj/argo-workflows/v3 (Go), github.com/argoproj/argo-workflows/v2 (Go), github.com/argoproj/argo-workflows (Go). Vendors: Go.
Related threats
- Argo Workflows privilege escalation via ArtifactGC PodSpecPatch
- Argo Workflows missing authorization in Sync ConfigMap Provider
- Argo Workflows authorization bypass in templateReferencing Strict mode
- Argo Workflows plaintext credential leak in workflow logs
- Argo Workflows denial of service in Webhook Interceptor