CVE-2025-47933

mediumpriority · track · 22EPSS 0.005 · 42 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.49% (42nd) EPSS

CVSS 5.4 · medium

Is it mine?

106 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in the repository page, an attacker can achieve cross-site scripting with permission to edit the repository. This issue has been patched in versions 2.13.8, 2.14.13, and 3.0.4.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedmicroshift-gitops-0:1.16.1-10.el9.aarch64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedmicroshift-gitops-0:1.16.1-10.el9.src as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedmicroshift-gitops-0:1.16.1-10.el9.x86_64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedmicroshift-gitops-release-info-0:1.16.1-10.el9.noarch as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-0:1.16.1-10.el9.aarch64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-0:1.16.1-10.el9.src as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-0:1.16.1-10.el9.x86_64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-0:1.16.1-26.el8.aarch64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-0:1.16.1-26.el8.ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-0:1.16.1-26.el8.s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-0:1.16.1-26.el8.src as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-0:1.16.1-26.el8.x86_64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-redistributable-0:1.16.1-10.el9.x86_64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-argocd-cli-redistributable-0:1.16.1-26.el8.x86_64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8269
Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:4c344603d539db58413b0a524b6dc19e4d16a2397127a2c0eee1f844a03fa986_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:50ab9013e309d5ea61017d2ced6893fa234a5e251f91054e5b6a320cb3110aea_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:9bcbb795fe718845891db412d5e0a296a74f08ed063e66f6ddca1b128f0e5e8c_ppc64le as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:b44e58a3c530141ad57f4bf35772825768545e9cf5a8158972fcdb21431ea193_s390x as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-extensions-rhel8@sha256:2a44a47b2e5bb34247b8087f4eef53571a8568ab8ab077ca5347f15d6d0918b8_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-extensions-rhel8@sha256:3ca4f65624276812aeca087d94a7f2647f1f86518df6d91aa2e4ab61d7ddbb78_ppc64le as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-extensions-rhel8@sha256:b0e9c6058aee36561f551f38244de4877a0aa2a4943364a5c7242e6639200ace_s390x as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-extensions-rhel8@sha256:f61b8485a0eb8ba0040b8786a5011ca262e23b0c3d2b2392f38ae0cb71b0c565_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-rhel8@sha256:043fcda29f079dc74d31260a987b761cc892aa916369f2a13a77592358cc2371_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-rhel8@sha256:2ae9f86a78aab91d4cc4b90fd1445fe1dccc5832b250c3a3746f5017626d8194_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-rhel8@sha256:4266cdf5fdffd689d2454839e4dce7c1074f3e4f1d2d69795fc241117c88da77_ppc64le as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-rhel8@sha256:e731d545ad5cb98eb6136de57fce77231ea43a138e8d73f1ad093e59dae2a35d_s390x as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-rhel9@sha256:217e0384e2bf4547e8ba9e3c41a48a36a56d0c124b9395873df22986baec74b8_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argocd-rhel9@sha256:910d1bdb99d53373ffa79bec24f238715ddda9964d700ee4bf53986d33396cb4_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:0173916d9d77cfd8f06b1dd08fec157973279b26adc56ab4fc0627bd4484ab2f_s390x as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:6a90dacdb5b2837db151f27b7ed14d7f8f1dde33de769191f26b915fc73cdf31_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:be8efc14c6a3ca2465f955e029625aa1faa076848780225e06fb8c752726d788_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:e68c36a3a4d218c3a16ae99ce57fcbf837560a3a9cf2a00e237185be47857fbe_ppc64le as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/dex-rhel8@sha256:0d4cd66b25f856b5891924fd4aafcfd732b671d5e48c11c172c7f87c2fbf1281_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/dex-rhel8@sha256:3b3b0c93bbcef63d45169b247a9c3fb2ee6ad88b1dbac4efe0eae19a72aedac1_ppc64le as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/dex-rhel8@sha256:4a9647a20d639efcfbaf8ed7699d2c1344fc12c99d6947ef3eca8173d97981f8_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/dex-rhel8@sha256:e3ac5bbd4d63c914facfcdf302d32b2be0cda4aa617ced830003ddf21923dd1c_s390x as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-operator-bundle@sha256:13b1f4f62fc296180523178948e3cff2c341041d4612785dfc80f5e0c228f8e3_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:3449a1f2321ddda4df7b40cfcd81069b3984fe89cc02b0998537ef819116a604_ppc64le as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:8383e1225608de37e5e58157287d28db6f3931489002c934fabd2283f3d6dff2_s390x as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:adb65cb44f6a9bb46f6bd038dd1b6cf282c4fa18cdb9aa3b3967b530fdb80de9_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:d3ed6273e7fc258bc1d7a11ae1f3a0c01da4f0f8061fac089c14964edc8e8a9d_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-rhel8@sha256:52b2b85cced911f5b7dd5d34b6f41b19133d90e2fa9a427875f2291d29e4843a_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-rhel8@sha256:c1a3eb6d9d1c25212eaad76c11fd854ab83caa91d6b314123b10137396dff139_ppc64le as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-rhel8@sha256:d99d8c676cce422a58a2db0ebe73ea62d0053f0158fc2ba45cac541823156f96_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/gitops-rhel8@sha256:f1b7977f1a32fc101fabb479a44dfedd288c4e9803ec1d6bed3d625251a5f7dc_s390x as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/must-gather-rhel8@sha256:29fae808ed83c7540939f023494b9182f2ee3a9e41826d02bb11c32f38e31922_arm64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/must-gather-rhel8@sha256:5e0a86e3d2c8e11f1accb54c094d40549d03e3e59d2604aa18a17e4fcf37e1cc_ppc64le as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/must-gather-rhel8@sha256:cca78c77f32ada9a0ad63261253f1dd07bca33fd4843c23c7a629f2402a4b38d_s390x as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/must-gather-rhel8@sha256:f06fe020be910cd9f71fa2a2df80c1ef33bf12c92c7077bdebe05e20680ab622_amd64 as a component of Red Hat OpenShift GitOps 1.15redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8277
Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:5ec3f9ecac054ad51bf46e806ae7bf12fc16ff45af9ca29c3ae997b9ce165299_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:721d7cbb275153b809ab58848f93930ee72c99316544ce2c0bf7c9246f3c768c_s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:aae8095403bd38e54074ec528f427218bb3794cde315df01b926f872311f6061_ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:b104df2409598b052bbd6bd768038f189bad29ca326386d8f5c997d70f45de69_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-extensions-rhel8@sha256:4ebab81f7caa4c7322f0f6c0bac90c1b9a97265d6e7e23b68d1afd6bffe9b30b_ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-extensions-rhel8@sha256:8807044d6ab60f36a7d15a281921a911d9749bf83c3de9a900322ef265a98bdf_s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-extensions-rhel8@sha256:b30edc331dcdbbb4147593f6fc433273478b3200c587abfd4e09d26e92a39218_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-extensions-rhel8@sha256:e25f5fac790ac1056d7c6618331f8b50030f7da701b9be70974afd6240b7760f_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-rhel8@sha256:296a1efdfe6c79d09e2774a1f14fc0071fd34dd4dec3e20704bd04fd9d92d252_s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-rhel8@sha256:33bd2d4b94056f4e3b732d7e0ef78f58ed0d4b3fe31e2a1bff2e26d5426b95f5_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-rhel8@sha256:9640a72f66ffef7329b164734db8057be531ea280b4fb27709ffc58a129a15f6_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-rhel8@sha256:ddf1b016616ba297a8bfd962f390e84bd00a9d855fc3b87910cb866800374023_ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-rhel9@sha256:78c0715198d0d9dc8f4fc25197423412eabd5fd4d82151a41f3568a74c4e7317_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/argocd-rhel9@sha256:e9f89c838a37794fe47d6aa5496f9db2d604e38ed51193e236191dbff0e41c92_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:9016be790965bfb51168aa3f32c314f97db6d9810cd1fc5043539075df76abae_s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:a4e8ff1f135c636a67ddc90cb9f907d71b7b9df49818ebb1819e289154c9d0ac_ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:e0dd5fa23e8aa5cb8b9ff221fc417cc1b93bcbe2e51a768590c25186c7b41bbf_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:fa2dc8d8feb489209b4250d509f3a3dcbbf087fc6be437300a885d4b139f5483_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/dex-rhel8@sha256:65cb265ba3180c0f8e198bce2bb305e62a7b1b8d9a2e649c44129eeee2977a84_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/dex-rhel8@sha256:6f4c6009d3347fc4ea7a0797c4742507f76e81e3f3a188a10d697a51fa947813_s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/dex-rhel8@sha256:a1529921e12066e73493cd8c7f6e98014bab714790eee5cb6868d86c95f63726_ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/dex-rhel8@sha256:c92e995de334e4318c4993cd1faac5c307af31fa9378ac7fac0ebec4ae62a5c9_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-operator-bundle@sha256:432bb516e3e7a06087f3f40b2455845a1009ff22f030b120dc01fbbd1715be02_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:1ea32d9afba50cc967cc0c4ffc474f1d7e1bd3907d23aa722205fddd139fabde_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:5fffd4c7810ad8347cc0ce5c74512b5dfba20e498437b8b872c9f4020450b3a0_s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:88d72dc49076d2983ed43311ece085067d468579e0c5aae49a638d2101ca7f6f_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:a0d4da0651c88891561941b7a3450fc15db55a3fbc7b5d825b60fc07b4c6452a_ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-rhel8@sha256:064ee457d8654c3ca85684a2bdef3f07bba2e21afd27857e98284a287108f14b_s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-rhel8@sha256:548018330614afa2d60e157817eb5bb234975d01c681ef75ccf27a04a3e5d7bc_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-rhel8@sha256:890ad2638a1ac4679d70ff4075f7be46d5b78a158cee7bdcf179698df3e4195c_ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/gitops-rhel8@sha256:e0d4da573364c3412da85ec2ec38e105bd1c53db44cb62f9abc297427739c468_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/must-gather-rhel8@sha256:2edc9ba7f87bb47d718a8cfb9e62b7d3c83d0920992c3cb13403be78042f5222_s390x as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/must-gather-rhel8@sha256:2f0dd107ba451c5e88eb9c89b5cb8c887499c8e95153a8eaaa3f486a0dc90307_amd64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/must-gather-rhel8@sha256:982a66ff060285fd15ef6c599634283f4166e31bed73d01b245fca0c8413a6ab_arm64 as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278
Fixedopenshift-gitops-1/must-gather-rhel8@sha256:a741a5785a9502466d074cda2002bd63dc1955a844abcb7558e45a017c5045e0_ppc64le as a component of Red Hat OpenShift GitOps 1.16redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2025:8278

cvss

Technical severity, 0–10. One row per scoring source.

9.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5–9.1

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:Nprimary · NVD / NIST USexploitability 2.3 · impact 2.7

v3.19criticalAV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · security-advisories@github.comexploitability 2.3 · impact 6

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · OSV

v3.15mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:Lsecondary · Red Hat Product Security US

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-79USCWE-79USCWE-79USCWE-79US

affected products (106)

Products and version ranges known to be affected.

Red Hat OpenShift GitOps <1.16.1all versionscert_bundDE
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Red Hat OpenShift≤ GitOps <1.16.1cert_bundDE
argoproj argo-cd≤ 1.2.0-rc1, ≤ 1.8.7enisa_euvdEU
argoproj argo-cd2.0.0-rc3, → 2.13.8enisa_euvdEU
argoproj argo-cd2.14.0-rc1, → 2.14.13enisa_euvdEU
argoproj argo-cd3.0.0-rc1, → 3.0.4enisa_euvdEU
The Linux Foundation Argo CD≤ 2.13.8fstec_bduRU
The Linux Foundation Argo CD2.14 → 2.14.13fstec_bduRU
The Linux Foundation Argo CD3.0 → 3.0.4fstec_bduRU
argoproj argo cd= 1.2.0nvdUScpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*
argoproj argo cd1.2.1 → 2.13.8nvdUScpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*
argoproj argo cd2.14.0 → 2.14.13nvdUScpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*
argoproj argo cd3.0.0 → 3.0.4nvdUScpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*
Bitnami argo-cd1.2.0 → 2.13.8osvUSpkg:bitnami/argo-cd
Bitnami argo-cd2.14.0 → 2.14.13osvUSpkg:bitnami/argo-cd
Bitnami argo-cd3.0.0 → 3.0.4osvUSpkg:bitnami/argo-cd
Go github.com/argoproj/argo-cd≥ 1.2.0-rc1osvUSpkg:golang/github.com/argoproj/argo-cd
Go github.com/argoproj/argo-cd1.2.0-rc1 → 1.8.7osvUSpkg:golang/github.com/argoproj/argo-cd
Go github.com/argoproj/argo-cd/v22.0.0-rc3 → 2.13.8osvUSpkg:golang/github.com/argoproj/argo-cd/v2

showing 20 of 106

advisories (7)

Vendor and ecosystem advisories describing this.

RHSA-2025:8269Red Hat Security Advisory: Red Hat OpenShift GitOps 1.16.1 security release2025-05-28csaf · redhat_csafUS
Errata advisory for Red Hat OpenShift GitOps 1.16.1 security release.
RHSA-2025:8277Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.15.3 security update2025-05-28csaf · redhat_csafUS
Errata Advisory for Red Hat OpenShift GitOps v1.15.3 security update.
RHSA-2025:8278Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.16.1 security update2025-05-28csaf · redhat_csafUS
Errata Advisory for Red Hat OpenShift GitOps v1.16.1 security update.
WID-SEC-W-2025-1164Red Hat OpenShift GitOps: Schwachstelle ermöglicht Cross-Site ScriptingDeutsch2025-05-29csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift GitOps ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
GHSA-2hj5-g64g-fp6pArgo CD allows cross-site scripting on repositories page2025-05-28ghsa · osvUS
### Impact This vulnerability allows an attacker to perform arbitrary actions on behalf of the victim via the API, such as creating, modifying, and deleting Kubernetes resources. Due to the improper filtering of URL protocols in the repository page, an attacker can achieve cross-site scripting with permission to edit the repository. In `ui/src/app/shared/components/urls.ts`, the following code exists to parse the repository URL. https://github.com/argoproj/argo-cd/blob/0ae5882d5ae9fe88efc51f65ca8543fb8c3a0aa1/ui/src/app/shared/components/urls.ts#L14-L26 Since this code doesn't validate the protocol of repository URLs, it's possible to inject `javascript:` URLs here. https://github.com/argoproj/argo-cd/blob/0ae5882d5ae9fe88efc51f65ca8543fb8c3a0aa1/ui/src/app/shared/components/repo.tsx#L5-L7 As the return value of this function is used in the `href` attribute of the `a` tag, it's possible to achieve cross-site scripting by using `javascript:` URLs. Browsers may return the proper hostname for `javascript:` URLs, allowing exploitation of this vulnerability. ### Patches A patch for this vulnerability has been released in the following Argo CD versions: - v3.0.4 - v2.14.13 - v2.13.8 The patch incorporates a way to validate the URL being passed in. Returning `null` if the validation fails. ### Workarounds There are no workarounds other than depending on the browser to filter the URL. ### Credits Disclosed by @Ry0taK [RyotaK](https://ryotak.net). ### For more information Open an issue in [the Argo CD issue tracker](https://github.com/argoproj/argo-cd/issues) or [discussions](https://github.com/argoproj/argo-cd/discussions) Join us on [Slack](https://argoproj.github.io/community/join-slack) in channel #argo-cd
BIT-argo-cd-2025-47933Argo CD allows cross-site scripting on repositories page2025-05-31vendor · osvUS
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in the repository page, an attacker can achieve cross-site scripting with permission to edit the repository. This issue has been patched in versions 2.13.8, 2.14.13, and 3.0.4.
GO-2025-3720Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd2025-05-29vendor · osvUS
Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

also known as (7)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund nvd redhat_csaf NVD CVE.org MITRE

published 2025-05-29modified 2026-06-17

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan