tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2022-41354: medium 5.3, EPSS 0.64%

Argo CD authenticated but unauthorized users may enumerate Application names via the API

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.4.28 or later.

go get github.com/argoproj/argo-cd/v2@v2.5.16
go get github.com/argoproj/argo-cd/v2@v2.6.7
go get github.com/argoproj/argo-cd/v2@v2.4.28

Affected

introducedfixedlast affected
2.5.02.5.16-
2.6.02.6.7-
02.4.28-

Fixed versions

2.5.162.6.72.4.28

Sources

CVE-2022-41354 · published · modified · JSON