Code injection

2022-08-1908:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.

CPENameOperatorVersion
octopus_serverge2019.1.0
octopus_serverle2019.7.3
octopus_serverge2020.1.0
octopus_serverle2020.6.5449
octopus_serverge2021.1.6959
octopus_serverle2021.3.13021
octopus_serverge2022.1.0
octopus_serverlt2022.1.3009
octopus_serverge2022.2.6729
octopus_serverlt2022.2.7244

Name	Operator	Version
octopus_server	ge	2019.1.0
octopus_server	le	2019.7.3
octopus_server	ge	2020.1.0
octopus_server	le	2020.6.5449
octopus_server	ge	2021.1.6959
octopus_server	le	2021.3.13021
octopus_server	ge	2022.1.0
octopus_server	lt	2022.1.3009
octopus_server	ge	2022.2.6729
octopus_server	lt	2022.2.7244

Rows per page:

1-10 of 121

References

advisories.octopus.com/post/2022/sa2022-09/