CVE-2022-1502

2022-05-0406:15:11

Octopus

www.cve.org

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions.

CNA Affected

[
  {
    "product": "Octopus Server",
    "vendor": "Octopus Deploy",
    "versions": [
      {
        "status": "affected",
        "version": "<"
      }
    ]
  }
]

References

advisories.octopus.com/post/2022/sa2022-03/