Code injection

2022-06-1300:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.5%

JSON

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space.

CPENameOperatorVersion
octopus_deployge2022.1.1495
octopus_deploylt2022.1.2647

CPE	Name	Operator	Version
	octopus_deploy	ge	2022.1.1495
	octopus_deploy	lt	2022.1.2647

References

advisories.octopus.com/post/2022/sa2022-05/