Vulnerabilities
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
A critical flaw in Argo CD allows attackers to read sensitive files and crash servers via JSONnet evaluation, affecting versions up to 3.6.0-rc2.
Everything RedTeam Tribune has reported about Kubernetes: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in Argo CD allows attackers to read sensitive files and crash servers via JSONnet evaluation, affecting versions up to 3.6.0-rc2.
Attackers with read-only access to applications can execute commands on Argo CD repo servers by injecting git options through Kustomize files.
Role-based access control in Kubernetes often fails because administrators grant permissions to service accounts without realizing those accounts inherit cluster-wide privileges.