Vulnerability Details CVE-2021-37914
In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.2%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.8
References
Products affected by CVE-2021-37914
-
cpe:2.3:a:argo-workflows_project:argo-workflows:*