Junglewise Threat Intelligence
CVE-2024-53862: GO-2024-3303 - Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
CVE-2024-53862 · Severity: medium · CVSS 4 · Published 2024-12-02
Technologies: github.com/argoproj/argo-workflows/v3 (Go), github.com/argoproj/argo-workflows/v2 (Go), github.com/argoproj/argo-workflows (Go). Vendors: Go.
Executive brief
Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
Affected products
- Go github.com/argoproj/argo-workflows/v3
- Go github.com/argoproj/argo-workflows/v2
- Go github.com/argoproj/argo-workflows