tocsin

CVE-2024-22424

2 advisories.

Go/github.com/argoproj/argo-cd CVE-2024-22424: high 8.3, EPSS 0.48%

github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0.1.0-1.8.7

Fixed versions

No fixed version in the source.

Sources

CVE-2024-22424 · published · modified · JSON

Go/github.com/argoproj/argo-cd/v2 CVE-2024-22424: high 8.3, EPSS 0.48%

github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.7.16 or later.

go get github.com/argoproj/argo-cd/v2@v2.7.16
go get github.com/argoproj/argo-cd/v2@v2.8.8
go get github.com/argoproj/argo-cd/v2@v2.9.4
go get github.com/argoproj/argo-cd/v2@v2.10-rc2

Affected

introducedfixedlast affected
02.7.16-
2.8.0-rc12.8.8-
2.9.0-rc12.9.4-
2.10.0-rc12.10-rc2-

Fixed versions

2.7.162.8.82.9.42.10-rc2

Sources

CVE-2024-22424 · published · modified · JSON