VDB

CVE-2023-50726

CVE-2023-50726 PUBLISHED CVSS 6.400000095367432 MEDIUM

Users with `create` but not `override` privileges can perform local sync in argo-cd

EPSS 0.53% · 42.8th percentile

Risk Scores

CVSS 3.1
6.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
EPSS Score
0.53%
42.8th percentile

Affected Products

VendorProductVersions
Bitnamiargo-cd2.10.0, 2.10.0, 1.2.0
Bitnamiargo-cd2.9.0, 2.10.0, 1.2.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Mar 13, 2024 CVE Published
  • Mar 13, 2024 PoC Published
  • Mar 13, 2024 PoC Published
  • Mar 14, 2024 EPSS Score
  • Mar 14, 2024 PoC Published
  • Apr 9, 2024 EPSS Score
  • Apr 10, 2024 CVE Updated
  • May 5, 2024 EPSS Score
  • Jun 1, 2024 EPSS Score
  • Jun 28, 2024 EPSS Score
  • Jul 24, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›