tocsin

Go/github.com/argoproj/argo-cd CVE-2022-1025, CVE-2022-24768: critical 9.9, EPSS 1.34%

Improper access control allows admin privilege escalation in Argo CD

Action: Upgrade github.com/argoproj/argo-cd to 2.1.14 or later.

go get github.com/argoproj/argo-cd@v2.1.14
go get github.com/argoproj/argo-cd@v2.2.8
go get github.com/argoproj/argo-cd@v2.3.2

Affected

introducedfixedlast affected
0.5.02.1.14-
2.2.02.2.8-
2.3.02.3.2-

Fixed versions

2.1.142.2.82.3.2

Sources

CVE-2022-1025, CVE-2022-24768 · published · modified · JSON