GO-2025-3720
Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2025-47933
- Alias
- BIT-argo-cd-2025-47933, GHSA-2hj5-g64g-fp6p
Description
Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/argoproj/argo-cd | introduced 1.2.0-rc1 |
| Go · github.com/argoproj/argo-cd/v2 | introduced 2.0.0-rc3, fixed 2.13.8, introduced 2.14.0-rc1, fixed 2.14.13 |
| Go · github.com/argoproj/argo-cd/v3 | introduced 0, fixed 3.0.4 |
Références
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-2hj5-g64g-fp6p ADVISORY
- https://github.com/argoproj/argo-cd/commit/a5b4041a79c54bc7b3d090805d070bcdb9a9e4d1 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |