Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-24348
7.7
HIGHCVSS v3
Published
February 4, 2022
CVSS v2
4 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file.
argoproj/argo-cd
GitHubDeclarative Continuous Deployment for Kubernetes
GitHubDeclarative Continuous Deployment for Kubernetes= *, < 2.1.9, >= 2.2.0, < 2.2.4NVD