Lucene search

GoogleOSV:GO-2024-2792

HistoryJun 04, 2024 - 3:19 p.m.

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

2024-06-0415:19:21

Google

osv.dev

argo cd

denial of service

github.com

argo cd v2

vulnerability

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

15.5%

JSON

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

References

github.com/argoproj/argo-cd/commit/7893979a1e78d59cedd0ba790ded24e30bb40657

github.com/argoproj/argo-cd/commit/9e5cc5a26ff0920a01816231d59fdb5eae032b5a

github.com/argoproj/argo-cd/commit/e2df7315fb7d96652186bf7435773a27be330cac

github.com/argoproj/argo-cd/security/advisories/GHSA-9m6p-x4h2-6frq

nvd.nist.gov/vuln/detail/CVE-2024-32476

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

15.5%

JSON

Related for OSV:GO-2024-2792