Database/Container, Kubernetes & orchestration
Argo CD: Directory traversal via Helm charts discloses credentials from other Applications' value files
CVE-2022-24348Container, Kubernetes & orchestrationcurated
Impact
Directory traversal via Helm charts discloses credentials from other Applications' value files; cross-tenant secret leak
Who can reach it
Any user with repo write access
What to do
Rolling Argo CD upgrade; rotate any credentials stored in chart values
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.