tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2022-24731: unknown, EPSS 0.96%

Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.1.11 or later.

go get github.com/argoproj/argo-cd/v2@v2.1.11
go get github.com/argoproj/argo-cd/v2@v2.2.6
go get github.com/argoproj/argo-cd/v2@v2.3.0

Affected

introducedfixedlast affected
02.1.11-
2.2.02.2.6-
2.3.0-rc12.3.0-

Fixed versions

2.1.112.2.62.3.0

Sources

CVE-2022-24731 · published · modified · JSON