CVE-2022-2049

2022-08-1908:45:14

Octopus

www.cve.org

0.001 Low

EPSS

Percentile

38.6%

JSON

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.

CNA Affected

[
  {
    "product": "Octopus Server",
    "vendor": "Octopus Deploy",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0.9",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.1.2894",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.2.6729",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.2.6872",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.3.348",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.3.4953",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

advisories.octopus.com/post/2022/sa2022-10/

0.001 Low

EPSS

Percentile

38.6%

JSON

Related for CVELIST:CVE-2022-2049