Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file.
| CVE Infomation | Exploits or more Infomation |
|---|---|
| mitre | EXPLOIT DATABASE |
| NVD | 0day.today |
| vulmon.com | github |
| CVE Details | |
| JVN ENG JPN | |
| Reconshell |
Software Tag:
List of frequently cited URLs
| User | URL | Info Source | Date |
|---|---|---|---|
| Typhon666_death | https://www.armosec.io/blog/cve-2022-24348-argo-kubernetes | Source Typhon666_death 1517469229557379072 | 2022/04/22 |
| ApiiroSecurity | https://hubs.ly/Q01bhsFz0 | Source ApiiroSecurity 1525625327145594880 | 2022/05/15 |
| tiffanyfayj | https://twitter.com/tiffanyfayj/status/1526125349381234688/... | Source tiffanyfayj 1526125349381234688 | 2022/05/16 |
| VulmonFeeds | https://alerts.vulmon.com/?utm_source=twitter&utm_medium=so... | Source VulmonFeeds 1528356287586750465 | 2022/05/22 |
| GeekmomK | https://ed.gr/dv2e1 | Source GeekmomK 1532399210250780674 | 2022/06/03 |
List of frequently cited URLs
| URL | Num of Times Referred to |
|---|---|
| ift | 2374 |
| alerts.vulmon.com | 174 |
| cvetrends.com | 49 |
| thehackernews.com | 10 |
| apiiro.com | 5 |
| www.armosec.io | 5 |
| opsmtrs.com | 4 |
| twitter.com | 3 |
| threatpost.com | 3 |
| User | URL | Info Source |
|---|---|---|
| Typhon666_death | armosec.io | Show Tweet |
| ApiiroSecurity | hubs.ly | Show Tweet |
| tiffanyfayj | twitter.com | Show Tweet |
| VulmonFeeds | alerts.vulmon.com | Show Tweet |
| GeekmomK | ed.gr | Show Tweet |
| Name | URL |
|---|---|
| No Data | |
| Name | URL |
|---|---|
| No Data | |