Security Advisory

CVE-2021-37914

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-02 23:17:45

Last updated 2024-08-04 01:30:09

Assigner mitre

State PUBLISHED

Description

In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated.

← Browse all CVEs View on cve.org ↗