CVE-2022-31035

CVE-2022-31035 affects Argo CD, a Kubernetes GitOps tool. All versions starting with v1.0.0 are vulnerable to an XSS issue that lets an attacker inject a javascript: link in the UI; when clicked by a victim, the script can run with the victim’s permissions (potentially admin) and perform UI/API a...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update

An update is now available for Red Hat OpenShift GitOps 1.3 on OpenShift 4.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update

An update is now available for Red Hat OpenShift GitOps 1.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...