CVE-2022-24348

Published February 4th, 2022

View on NVD ↗

CVSS v3

7.7

HIGH

CVSS v2

MEDIUM

Affected

PROJECT

Description

Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file.

argoproj/argo-cd

Declarative Continuous Deployment for Kubernetes

GitHub

23K