Showing 1 - 4 of 4

CVE-2022-31035

Status Candidate

Overview

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.0.0 are vulnerable to a cross-site scripting (XSS) bug allowing a malicious user to inject a `javascript:` link in the UI. When clicked by a victim user, the script will execute with the victim's permissions (up to and including admin). The script would be capable of doing anything which is possible in the UI or via the API, such as creating, modifying, and deleting Kubernetes resources. A patch for this vulnerability has been released in the following Argo CD versions: v2.4.1, v2.3.5, v2.2.10 and v2.1.16. There are no completely-safe workarounds besides upgrading.

Related Files

Red Hat Security Advisory 2022-5153-01: Posted Jun 28, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-5153-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a cross site scripting vulnerability.; tags | advisory, xss; systems | linux, redhat; advisories | CVE-2022-1271, CVE-2022-31016, CVE-2022-31034, CVE-2022-31035, CVE-2022-31036; SHA-256 | cc16d45312d68f962d548306cde1021b4ee007d0c4b42022d18fe4386ed9c0be; Download | Favorite | View

Red Hat Security Advisory 2022-5187-01: Posted Jun 27, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-5187-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a cross site scripting vulnerability.; tags | advisory, xss; systems | linux, redhat; advisories | CVE-2018-25032, CVE-2022-1271, CVE-2022-31016, CVE-2022-31034, CVE-2022-31035, CVE-2022-31036; SHA-256 | 0a7f3fffd9866c5b40c985920ee612757ab73b95dd4f23d5abdc436916c5205c; Download | Favorite | View

Red Hat Security Advisory 2022-5192-01: Posted Jun 27, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-5192-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a cross site scripting vulnerability.; tags | advisory, xss; systems | linux, redhat; advisories | CVE-2018-25032, CVE-2022-1271, CVE-2022-31016, CVE-2022-31034, CVE-2022-31035, CVE-2022-31036; SHA-256 | c775e40daa94a0be965cf3c0851fde8c1d6902e7911904915a057150928aaec6; Download | Favorite | View

Red Hat Security Advisory 2022-5152-01: Posted Jun 22, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-5152-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a cross site scripting vulnerability.; tags | advisory, xss; systems | linux, redhat; advisories | CVE-2018-25032, CVE-2022-1271, CVE-2022-31016, CVE-2022-31034, CVE-2022-31035, CVE-2022-31036; SHA-256 | 0ac0a1be111b0b9abfc2bcd94eeb4a72a6287a79b916bcce9c21e3b97cafdfdf; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 247 files
Ubuntu 96 files
indoushka 49 files
Jasper Nota 25 files
Gentoo 19 files
Willem Westerhof 19 files
Jim Blankendaal 11 files
Debian 11 files
Apple 9 files
Martijn Baalman 9 files

File Archives

Systems

AIX (429)
Apple (2,099)
BSD (377)
CentOS (58)
Cisco (1,927)
Debian (7,085)
Fedora (1,693)
FreeBSD (1,246)
Gentoo (4,534)
HPUX (880)
iOS (378)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (50,603)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,440)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,724)
UNIX (9,433)
UnixWare (187)
Windows (6,668)
Other

CVE-2022-31035

Overview

Related Files

File Archive:

August 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems