tocsin

CVE-2022-24817

3 advisories.

Go/github.com/fluxcd/flux2 CVE-2022-24817: critical 9.9, EPSS 1.12%

Improper kubeconfig validation allows arbitrary code execution

Action: Upgrade github.com/fluxcd/flux2 to 0.29.0 or later.

go get github.com/fluxcd/flux2@v0.29.0

Affected

introducedfixedlast affected
0.1.00.29.0-

Fixed versions

0.29.0

Sources

CVE-2022-24817 · published · modified · JSON

Go/github.com/fluxcd/kustomize-controller CVE-2022-24817: critical 9.9, EPSS 1.12%

Improper kubeconfig validation allows arbitrary code execution

Action: Upgrade github.com/fluxcd/kustomize-controller to 0.23.0 or later.

go get github.com/fluxcd/kustomize-controller@v0.23.0

Affected

introducedfixedlast affected
0.1.00.23.0-

Fixed versions

0.23.0

Sources

CVE-2022-24817 · published · modified · JSON

Go/github.com/fluxcd/helm-controller CVE-2022-24817: critical 9.9, EPSS 1.12%

Improper kubeconfig validation allows arbitrary code execution

Action: Upgrade github.com/fluxcd/helm-controller to 0.19.0 or later.

go get github.com/fluxcd/helm-controller@v0.19.0

Affected

introducedfixedlast affected
0.2.00.19.0-

Fixed versions

0.19.0

Sources

CVE-2022-24817 · published · modified · JSON