Lucene search
+L

4 matches found

CNVD
CNVD
•added 2022/02/10 12:00 a.m.•106 views

Argo CD path traversal vulnerability

Argo is an open source container native workflow engine. argo CD is vulnerable to a path traversal vulnerability that originates from an error in helmTemplate in repository.go, which can be exploited by an attacker to discover credentials stored in YAML files...

7.7CVSS3.9AI score0.02693EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/02/07 2:23 p.m.•41 views

Directory Traversal

github.com/argoproj/argo-cd is vulnerable to directory traversal. The vulnerability exists in helmTemplate function of repository.go which allows a malicious user to traverse the file system...

7.7CVSS3.6AI score0.02693EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•2 views

CVE-2022-24348: Improper Limitation of a Pathname to a Restricted Directory

Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file...

7.7CVSS7.5AI score0.02693EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/02/04 12:00 a.m.•24 views

Argo CD 路径遍历漏洞

Argo is an open source container native workflow engine. argo CD is vulnerable to a path traversal vulnerability that originates from an error in helmTemplate in repository.go, which can be exploited by an attacker to discover credentials stored in YAML files...

7.7CVSS5.6AI score0.02693EPSS
SaveExploits1References11
Rows per page
Query Builder