Lucene search
HistoryJul 15, 2022 - 8:15 a.m.
CVE-2022-29890
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
31.5%
In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.
Affected configurations
Node
octopusoctopus_serverRange2019.7.0–2021.3.13021
ORoctopusoctopus_serverRange2022.1.2121–2022.1.2849
ORoctopusoctopus_serverRange2022.3.348–2022.3.2387
ORoctopusoctopus_serverMatch2022.2.6729
Related
prion
prion
Cross site scripting
2022-07-15 08:15:00
cvelist
cvelist
CVE-2022-29890
2022-07-15 07:40:16
cve
cve
CVE-2022-29890
2022-07-15 08:15:07
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
31.5%
Related for NVD:CVE-2022-29890