CVE-2022-41354

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2023-03-27

Last modified

2026-07-09

Weaknesses

CWE-203

Affected products

• Argo-cd (Linuxfoundation)

References

• https://github.com/argoproj/argo-cd/security/advisories/GHSA-2q5c-qw9c-fmvq
• https://github.com/chunklhit/cve/blob/master/argo/argo-cd/application_enumeration.md