PT-2022-3256 · Argo Cd · Argo Cd

Adam Korczynski + 1 · Published 2022-06-15 · Updated 2024-08-21 · CVE-2022-31035

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Argo CD versions 1.0.0 through 2.4.0 Argo CD versions 2.1.0 through 2.1.15 Argo CD versions 2.2.0 through 2.2.9 Argo CD versions 2.3.0 through 2.3.4

Description Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The issue is related to a cross-site scripting (XSS) bug, allowing a malicious user to inject a javascript: link in the UI. When clicked by a victim user, the script will execute with the victim's permissions, up to and including admin. This could enable the creation, modification, and deletion of Kubernetes resources.

Recommendations For versions prior to 2.1.16, upgrade to version 2.1.16 or later. For versions prior to 2.2.10, upgrade to version 2.2.10 or later. For versions prior to 2.3.5, upgrade to version 2.3.5 or later. For versions prior to 2.4.1, upgrade to version 2.4.1 or later. As a temporary workaround, consider avoiding clicking external links presented in the UI and carefully limiting who has permissions to edit resource manifests.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

CWE-80

Related Identifiers

BDU:2022-03974

CVE-2022-31035

GHSA-H4W9-6X78-8VRJ

GO-2022-0498

Affected Products

Argo Cd

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31035.json · Exploit
• https://github.com/argoproj/argo-cd/commit/8bc3ef690de29c68a36f473908774346a44d4038 · Patch
• https://argo-cd.readthedocs.io/en/stable/user-guide/external-url · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03974 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-31035 · Security Note
• https://osv.dev/vulnerability/GO-2022-0498 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31035 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-h4w9-6x78-8vrj · Vendor Advisory
• https://github.com/argoproj/argo-cd · Note
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-h4w9-6x78-8vrj · Note
• https://t.me/cibsecurity/45215 · Telegram Post
• https://access.redhat.com/security/cve/CVE-2022-31035 · Note
• https://github.com/advisories/GHSA-h4w9-6x78-8vrj · Note