Blog
Writeups, notes, and research.
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL
Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a proxy URL. The proxy host and port are copied into an SSH ProxyCommand. A host that contains shell metacharacters …