cve.bz

CVE-2024-13484

8.2 highEPSS 0.2%

High (8.2). EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/redhat-developer/gitops-operator 1.16.2.

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.

Severity

CVSS 3.1

8.2 high
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE
CWE-668
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-58fx-7v9q-3g56Gogithub.com/redhat-developer/gitops-operator<1.16.21.16.2
GO-2025-3427Gogithub.com/redhat-developer/gitops-operatorall versionsno fix published

References

Check your stackJSON