CVE-2021-23135

5.5 mediumEPSS 0.2%

Medium (5.5) in argoproj argo cd. EPSS 0.2% chance of exploitation in the next 30 days.

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWEs: CWE-209, CWE-497
Published: 2021-05-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

argoproj:argo_cd

References

https://github.com/argoproj/argo-cd/security/advisories/GHSA-fp89-h8pj-8894
https://github.com/argoproj/argo-cd/security/advisories/GHSA-fp89-h8pj-8894

Check your stack JSON