CVE-2022-29890

2022-07-1507:40:16

Octopus

www.cve.org

0.001 Low

EPSS

Percentile

31.5%

JSON

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.

CNA Affected

[
  {
    "product": "Octopus Server",
    "vendor": "Octopus Deploy",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2019.7.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2021.3.13021",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.1.2121",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.1.2894",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.2.6729",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.2.6971",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.3.348",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.3.2387",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

advisories.octopus.com/post/2022/sa2022-07/

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for CVELIST:CVE-2022-29890