Red Hat Security Advisory

RHSA-2022:0476

Red Hat OpenShift GitOps security update

Released 2022-02-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.3 openshift-gitops-1/applicationset-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/dex-rhel8 +4

TI-2022-08226 CVE-2022-24348 · GHSA-63qx-x74g-jcr7

LOW 39

Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.02768 Published 2022-02-04 Fixed in 2.1.9, 2.2.4 CWE-22