Design/Logic Flaw

2022-08-1909:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

38.6%

JSON

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation.

CPENameOperatorVersion
octopus_serverge0.9
octopus_serverle0.9.620.4
octopus_serverge1.0
octopus_serverle1.6.3.1723
octopus_serverge2.0
octopus_serverle2.6.5
octopus_serverge3.0.0
octopus_serverle3.17.14
octopus_serverge4.0.4
octopus_serverle4.1.10

Name	Operator	Version
octopus_server	ge	0.9
octopus_server	le	0.9.620.4
octopus_server	ge	1.0
octopus_server	le	1.6.3.1723
octopus_server	ge	2.0
octopus_server	le	2.6.5
octopus_server	ge	3.0.0
octopus_server	le	3.17.14
octopus_server	ge	4.0.4
octopus_server	le	4.1.10

Rows per page:

1-10 of 241

References

advisories.octopus.com/post/2022/sa2022-12/

0.001 Low

EPSS

Percentile

38.6%

JSON

Related for PRION:CVE-2022-2075