GO-2022-0498 Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

🗓️ 21 Aug 2024 15:11:33Reported by GoogleType

osv

osv🔗 osv.dev👁 13 Views

Argo CD's external URLs can include JavaScript in deployments

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	The vulnerability of the application deployment automation tool in Kubernetes ArgoCD, related to the failure to remove script-related HTML tags from web pages, allows attackers to perform cross-site scripting attacks.	29 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-31035	27 Jun 202222:35	–	circl
CNNVD	Red Hat OpenShift 跨站脚本漏洞	22 Jun 202200:00	–	cnnvd
CNVD	Red Hat OpenShift Cross-Site Scripting Vulnerability	24 Jun 202200:00	–	cnvd
CVE	CVE-2022-31035	27 Jun 202219:10	–	cve
Cvelist	CVE-2022-31035 External URLs for Deployments can include javascript in argo-cd	27 Jun 202219:10	–	cvelist
EUVD	EUVD-2022-6061	3 Oct 202520:07	–	euvd
Github Security Blog	Argo CD's external URLs for Deployments can include JavaScript	21 Jun 202220:04	–	github
GitLab Advisory Database	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	21 Jun 202200:00	–	gitlab
GitLab Advisory Database	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	21 Jun 202200:00	–	gitlab

Source	Link
github	www.github.com/argoproj/argo-cd/security/advisories/GHSA-h4w9-6x78-8vrj
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31035
github	www.github.com/argoproj/argo-cd/commit/8bc3ef690de29c68a36f473908774346a44d4038
argo-cd	www.argo-cd.readthedocs.io/en/stable/user-guide/external-url

03 Mar 2026 04:50Current

7.1High risk

Vulners AI Score7.1

CVSS 23.5

CVSS 3.15.4 - 9

EPSS0.00779

SSVC

argo cd external urls javascript github software