{"metadata": {"vulnerability": "CVE-2022-24348", "count": 59, "kinds": {"milestone": 8, "sighting": 9, "kev": 0, "other": 42}}, "data": [{"timestamp": "2022-02-02T00:00:00Z", "date_only": false, "value": "2022-02-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-24348", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-04T00:00:00Z", "date_only": false, "value": "2022-02-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2022-02-04T00:00:00Z", "date_only": false, "value": "2022-02-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0477", "record": "RHSA-2022:0477", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2022-02-04T00:00:00Z", "date_only": false, "value": "2022-02-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0580", "record": "RHSA-2022:0580", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2022-02-04T00:00:00Z", "date_only": false, "value": "2022-02-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0682", "record": "RHSA-2022:0682", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2022-02-04T14:07:00Z", "date_only": false, "value": "2022-02-04T14:07:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-02-04T14:07:00Z", "date_only": false, "value": "2022-02-04T14:07:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0477", "record": "RHSA-2022:0477", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-02-04T14:07:00Z", "date_only": false, "value": "2022-02-04T14:07:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0580", "record": "RHSA-2022:0580", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-02-04T14:07:00Z", "date_only": false, "value": "2022-02-04T14:07:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0682", "record": "RHSA-2022:0682", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-02-04T19:47:38Z", "date_only": false, "value": "2022-02-04T19:47:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/36862", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "36291ca1-53c9-4b78-9b08-0f952e499afa", "content": "\u274c Argo CD Security Bug Opens Kubernetes Cloud Apps to Attackers \u274c\n\nThe popular continuous-delivery platform has a path-traversal bug (CVE-2022-24348) that could allow cyberattackers to hop from one application ecosystem to another.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "url": "https://t.me/cibsecurity/36862"}, {"timestamp": "2022-02-04T20:26:21Z", "date_only": false, "value": "2022-02-04T20:26:21.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-24348", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-04T20:26:21Z", "date_only": false, "value": "2022-02-04T20:26:21.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-24348", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-02-04T21:15:00Z", "date_only": false, "value": "2022-02-04T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-63QX-X74G-JCR7", "record": "GHSA-63QX-X74G-JCR7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-04T21:15:00Z", "date_only": false, "value": "2022-02-04T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-24348", "record": "GSD-2022-24348", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-04T21:15:08.103Z", "date_only": false, "value": "2022-02-04T21:15:08.103", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24348", "record": "FKIE_CVE-2022-24348", "field": "published"}, {"timestamp": "2022-02-05T00:31:17Z", "date_only": false, "value": "2022-02-05T00:31:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/36888", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "17859613-64d5-4507-8d60-b05388c06766", "content": "\u203c CVE-2022-24348 \u203c\n\nArgo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/36888"}, {"timestamp": "2022-02-06T06:49:12Z", "date_only": false, "value": "2022-02-06T06:49:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/1860", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "d9a15f00-e51f-403d-8a85-41c16990df82", "content": "A new vulnerability (CVE-2022-24348) has been discovered in Argo CD, which is used by thousands of organizations globally, could let hackers steal sensitive information such as secrets, passwords, and API keys from Kubernetes apps.\n\nDetails: https://thehackernews.com/2022/02/new-argo-cd-bug-could-let-hackers-steal.html", "url": "https://t.me/thehackernews/1860"}, {"timestamp": "2022-02-06T14:46:31Z", "date_only": false, "value": "2022-02-06T14:46:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/8719", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "99ed102d-943d-4c8e-9048-51346a35b51e", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Zero-Day: Users of the Argo continuous deployment (CD) tool for Kubernetes are being urged to push through updates after a zero-day vulnerability was found that could allow an attacker to extract sensitive information such as passwords and API keys. The flaw, tagged as CVE-2022-24348 (CVSS score: 7.7), affects all versions and has been addressed in versions 2.3.0, 2.2.4, and 2.1.9.", "url": "https://t.me/cKure/8719"}, {"timestamp": "2022-02-07T00:00:00Z", "date_only": true, "value": "2022-02-07", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-24348", "record": "GSD-2022-24348", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-02-07T19:06:18Z", "date_only": false, "value": "2022-02-07T19:06:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-63QX-X74G-JCR7", "record": "GHSA-63QX-X74G-JCR7", "field": "published"}, {"timestamp": "2022-02-08T11:01:01Z", "date_only": false, "value": "2022-02-08T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5367", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "ceccac1b-7829-41eb-ade3-2bc0f87258d4", "content": "#Threat_Research\n1. CVE-2022-24348:\nCharts can be used to steal sensitive information from Argo CD deployments\nhttps://apiiro.com/blog/malicious-kubernetes-helm-charts-can-be-used-to-steal-sensitive-information-from-argo-cd-deployments\n2. Shadow Credentials\nhttps://pentestlab.blog/2022/02/07/shadow-credentials", "url": "https://t.me/CyberSecurityTechnologies/5367"}, {"timestamp": "2022-02-08T22:08:38Z", "date_only": false, "value": "2022-02-08T22:08:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-08T22:08:38Z", "date_only": false, "value": "2022-02-08T22:08:38+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-02-08T22:08:38Z", "date_only": false, "value": "2022-02-08T22:08:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-08T22:08:39Z", "date_only": false, "value": "2022-02-08T22:08:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-02-08T22:16:24Z", "date_only": false, "value": "2022-02-08T22:16:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0477", "record": "RHSA-2022:0477", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-08T22:16:24Z", "date_only": false, "value": "2022-02-08T22:16:24+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0477", "record": "RHSA-2022:0477", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-02-08T22:16:24Z", "date_only": false, "value": "2022-02-08T22:16:24+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0477", "record": "RHSA-2022:0477", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-09T13:53:00Z", "date_only": false, "value": "2022-02-09T13:53Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-24348", "record": "GSD-2022-24348", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-02-10T00:00:00Z", "date_only": true, "value": "2022-02-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-11490", "record": "CNVD-2022-11490", "field": "submitTime"}, {"timestamp": "2022-02-10T09:57:42Z", "date_only": false, "value": "2022-02-10T09:57:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1488", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "6e19a463-ef90-4fe1-a2e2-8276c347fdad", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24348 Test\nURL\uff1ahttps://github.com/mochizuki875/helm-sample", "url": "https://t.me/GithubRedTeam/1488"}, {"timestamp": "2022-02-11T00:00:00Z", "date_only": true, "value": "2022-02-11", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-24348", "record": "GSD-2022-24348", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-02-17T21:46:48Z", "date_only": false, "value": "2022-02-17T21:46:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0580", "record": "RHSA-2022:0580", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-17T21:46:48Z", "date_only": false, "value": "2022-02-17T21:46:48+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0580", "record": "RHSA-2022:0580", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-02-17T21:46:48Z", "date_only": false, "value": "2022-02-17T21:46:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0580", "record": "RHSA-2022:0580", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-18T00:00:00Z", "date_only": true, "value": "2022-02-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-11490", "record": "CNVD-2022-11490", "field": "openTime"}, {"timestamp": "2022-02-25T19:48:20Z", "date_only": false, "value": "2022-02-25T19:48:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0682", "record": "RHSA-2022:0682", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-25T19:48:20Z", "date_only": false, "value": "2022-02-25T19:48:20+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0682", "record": "RHSA-2022:0682", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-02-25T19:48:20Z", "date_only": false, "value": "2022-02-25T19:48:20+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0682", "record": "RHSA-2022:0682", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-12-13T01:19:43.443Z", "date_only": false, "value": "2023-12-13T01:19:43.443069Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24348", "record": "GSD-2022-24348", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T04:07:02.386Z", "date_only": false, "value": "2024-08-03T04:07:02.386Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-24348", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T04:07:02.386Z", "date_only": false, "value": "2024-08-03T04:07:02.386Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-24348", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-07T19:46:23Z", "date_only": false, "value": "2024-08-07T19:46:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-63QX-X74G-JCR7", "record": "GHSA-63QX-X74G-JCR7", "field": "modified"}, {"timestamp": "2025-03-13T20:14:03Z", "date_only": false, "value": "2025-03-13T20:14:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/AyushyaChitransh/3b69f94e19b188ba41ee0c49a282e64c", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "85db0585-f561-4f4d-9190-23be005d3b16", "url": "https://gist.github.com/AyushyaChitransh/3b69f94e19b188ba41ee0c49a282e64c"}, {"timestamp": "2026-06-17T04:31:40.307Z", "date_only": false, "value": "2026-06-17T04:31:40.307", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24348", "record": "FKIE_CVE-2022-24348", "field": "lastModified"}, {"timestamp": "2026-06-26T16:00:44Z", "date_only": false, "value": "2026-06-26T16:00:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0580", "record": "RHSA-2022:0580", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-26T16:00:44Z", "date_only": false, "value": "2026-06-26T16:00:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0580", "record": "RHSA-2022:0580", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-26T16:00:44Z", "date_only": false, "value": "2026-06-26T16:00:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0580", "record": "RHSA-2022:0580", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0477", "record": "RHSA-2022:0477", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0682", "record": "RHSA-2022:0682", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0477", "record": "RHSA-2022:0477", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0682", "record": "RHSA-2022:0682", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0476", "record": "RHSA-2022:0476", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0477", "record": "RHSA-2022:0477", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-26T16:00:46Z", "date_only": false, "value": "2026-06-26T16:00:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0682", "record": "RHSA-2022:0682", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-14T16:00:22.910Z", "date_only": false, "value": "2026-08-14T16:00:22.910762Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/devsecops_weekly/397", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "ef88a5c1-c87f-452f-a4b6-3680f253a651", "url": "https://t.me/devsecops_weekly/397"}, {"timestamp": "2026-09-01T17:00:11.355Z", "date_only": false, "value": "2026-09-01T17:00:11.355784Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/484", "record": "CVE-2022-24348", "field": "creation_timestamp", "uuid": "c13ac9f6-8025-489b-93d9-35dfdb4bb597", "url": "https://t.me/Hackme_news/484"}]}