Cross site request forgery (csrf)

2022-10-0618:15:00

PRIOn knowledge base

www.prio-n.com

csrf

octopus server

session cookie

vulnerability

nvd

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token

CPENameOperatorVersion
octopus_serverge2022.3.348
octopus_serverlt2022.3.10586
octopus_serverge2022.2.6729
octopus_serverlt2022.2.7897
octopus_serverge3.12.0
octopus_serverlt2022.1.3154

Name	Operator	Version
octopus_server	ge	2022.3.348
octopus_server	lt	2022.3.10586
octopus_server	ge	2022.2.6729
octopus_server	lt	2022.2.7897
octopus_server	ge	3.12.0
octopus_server	lt	2022.1.3154

References

advisories.octopus.com/post/2022/sa2022-17/