CVE-2021-23347
2 advisories.
Go/github.com/argoproj/argo-cd/v2 CVE-2021-23347: medium 4.7
Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd/v2
Action: Upgrade github.com/argoproj/argo-cd/v2 to 1.7.13 or later.
go get github.com/argoproj/argo-cd/v2@v1.7.13go get github.com/argoproj/argo-cd/v2@v1.8.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.13 | - |
| 1.8.0 | 1.8.6 | - |
Fixed versions
| 1.7.13 | 1.8.6 |
Sources
- osv: GHSA-qq5v-f4c3-395c
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-qq5v-f4c3-395c
- https://nvd.nist.gov/vuln/detail/CVE-2021-23347
- https://github.com/argoproj/argo-cd/pull/5563
- https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMARGOPROJARGOCDCMD-1078291
CVE-2021-23347 · published · modified · JSON
Go/github.com/argoproj/argo-cd CVE-2021-23347: unknown
Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd
Action: Upgrade github.com/argoproj/argo-cd to 1.7.13 or later.
go get github.com/argoproj/argo-cd@v1.7.13go get github.com/argoproj/argo-cd@v1.8.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.13 | - |
| 1.8.0 | 1.8.6 | - |
Fixed versions
| 1.7.13 | 1.8.6 |
Sources
- osv: GO-2022-0869
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-qq5v-f4c3-395c
- https://nvd.nist.gov/vuln/detail/CVE-2021-23347
- https://github.com/argoproj/argo-cd/pull/5563
- https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMARGOPROJARGOCDCMD-1078291
CVE-2021-23347 · published · modified · JSON