VDB
CVE-2022-24731
CVE-2022-24731
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Path traversal allows leaking out-of-bound files from Argo CD repo-server
EPSS 0.96% · 58.9th percentile
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.96%
58.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | argoproj/argo-cd | 1.5.0, 2.3.0-rc1, 2.2.0 |
| argoproj | argo-cd | >= 1.5.0, < 2.1.11, >= 2.2.0, < 2.2.6, >= 2.3.0-rc1, < 2.3.0 |
| argoproj | argo_cd | 1.5.0, 2.3.0, 2.3.0 |
Timeline
- Mar 23, 2022 CVE Published
- Mar 24, 2022 EPSS Score
- May 14, 2022 EPSS Score
- Jul 4, 2022 EPSS Score
- Aug 25, 2022 EPSS Score
- Oct 15, 2022 EPSS Score
- Dec 5, 2022 EPSS Score
- Jan 25, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 7, 2023 EPSS Score
- Jun 27, 2023 EPSS Score
- Aug 17, 2023 EPSS Score