CVE-2021-26924

6.1MEDIUM

Key Information:

Vendor
Linux
Status
Argo-cd
Vendor
CVE Published:
15 March 2021

Summary

An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header.

References

https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4
x_refsource_MISC
https://github.com/argoproj/argo-cd/security/advisories/G...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.