tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2022-24905: unknown, EPSS 1.30%

Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.1.15 or later.

go get github.com/argoproj/argo-cd/v2@v2.1.15
go get github.com/argoproj/argo-cd/v2@v2.2.9
go get github.com/argoproj/argo-cd/v2@v2.3.4

Affected

introducedfixedlast affected
2.0.02.1.15-
2.2.02.2.9-
2.3.02.3.4-

Fixed versions

2.1.152.2.92.3.4

Sources

CVE-2022-24905 · published · modified · JSON