EUVD-2022-35064

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

In Octopus Server, an IDOR vulnerability allows API access to team information in affected versions.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-2828	13 Oct 202213:18	–	circl
CNNVD	Octopus Server 安全漏洞	13 Oct 202200:00	–	cnnvd
CVE	CVE-2022-2828	13 Oct 202200:00	–	cve
Cvelist	CVE-2022-2828	13 Oct 202200:00	–	cvelist
NVD	CVE-2022-2828	13 Oct 202205:15	–	nvd
OSV	CVE-2022-2828	13 Oct 202205:15	–	osv
Prion	Design/Logic Flaw	13 Oct 202205:15	–	prion
Positive Technologies	PT-2022-18934 · Unknown · Octopus Server	13 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2828	22 May 202522:41	–	redhatcve
Vulnrichment	CVE-2022-2828	13 Oct 202200:00	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "dc044a42-cd57-305a-a7fc-4b44618941e5",
        "vendor": {
          "name": "Octopus Deploy"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "275f6aea-44f6-3421-98f7-480336ff4447",
        "product": {
          "name": "Octopus Server"
        },
        "product_version": "2022.3.348 <unspecified"
      },
      {
        "id": "28ce2d59-a45a-376a-b483-9b089ab92763",
        "product": {
          "name": "Octopus Server"
        },
        "product_version": "2022.1.2121 <unspecified"
      },
      {
        "id": "3560e773-2e3f-3595-ae09-c4da568b8ca0",
        "product": {
          "name": "Octopus Server"
        },
        "product_version": "2022.2.6729 <unspecified"
      },
      {
        "id": "58c54834-bdaa-3cc5-8088-99ec51f163a4",
        "product": {
          "name": "Octopus Server"
        },
        "product_version": "unspecified <2022.1.3135"
      },
      {
        "id": "89b5cf06-00f4-382f-a5c0-7acb76f1ce98",
        "product": {
          "name": "Octopus Server"
        },
        "product_version": "unspecified <2022.2.7897"
      },
      {
        "id": "93d1e99b-f2a4-36ed-bc52-564a85d1a129",
        "product": {
          "name": "Octopus Server"
        },
        "product_version": "unspecified <2022.3.10586"
      }
    ]
  }
]

Source	Link
advisories	www.advisories.octopus.com/post/2022/sa2022-19/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-2828

03 Oct 2025 20:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.00266

SSVC