{"vulnerability": "CVE-2022-25856", "sightings": [{"uuid": "42852666-c1cb-4a23-a784-6df048cd2252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25856", "type": "seen", "source": "https://t.me/cibsecurity/44758", "content": "\u203c CVE-2022-25856 \u203c\n\nThe package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the (g *GitArtifactReader).Read() API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containing a symbolic link or an implicit directory name such as ...\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-18T00:23:10.000000Z"}]}