Database/Container, Kubernetes & orchestration
Argo CD: CSRF against the Argo CD API allows deploying arbitrary workloads with Argo's cluster-admin rights
CVE-2024-22424Container, Kubernetes & orchestrationcurated
Impact
CSRF against the Argo CD API allows deploying arbitrary workloads with Argo's cluster-admin rights
Who can reach it
An attacker who gets a logged-in operator to visit a hostile page
What to do
Rolling Argo CD upgrade; no GPU drain. Also scope Argo's cluster credentials down
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.