CRITICALGo →
github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability
github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability
Affected packages
- github.com/argoproj/argo-cd
- github.com/argoproj/argo-cd/v2— 2.10.0-rc1 → 2.10-rc2
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-92mw-q256-5vwg
- https://nvd.nist.gov/vuln/detail/CVE-2024-22424
- https://github.com/argoproj/argo-cd/issues/2496
- https://github.com/argoproj/argo-cd/pull/16860
- https://github.com/argoproj/argo-cd/commit/0b459f224b3186707809be8240dfc3a6028f42a0
- https://github.com/argoproj/argo-cd/commit/13fe3ca589f6f2ded6001ce114e354602ed058b3
- https://github.com/argoproj/argo-cd/commit/3c5878ecf41581942281e9c95745f073bdfbf9c3
- https://github.com/argoproj/argo-cd/commit/f569aa105e0fe5940bc736c68e2fc90ee4a6ed94
- https://github.com/argoproj/argo-cd
Structured record: https://osv.dev/vulnerability/GHSA-92mw-q256-5vwg
Recommended response stack
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta