Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a proxy URL. The proxy host and port are copied into an SSH ProxyCommand. A host that contains shell metacharacters …