Cross site scripting

2022-07-1508:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.5%

JSON

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.

CPENameOperatorVersion
octopus_serverge2022.3.348
octopus_serverlt2022.3.2387
octopus_serverge2022.1.2121
octopus_serverlt2022.1.2849
octopus_servereq2022.2.6729
octopus_serverge2019.7.0
octopus_serverlt2021.3.13021

Name	Operator	Version
octopus_server	ge	2022.3.348
octopus_server	lt	2022.3.2387
octopus_server	ge	2022.1.2121
octopus_server	lt	2022.1.2849
octopus_server	eq	2022.2.6729
octopus_server	ge	2019.7.0
octopus_server	lt	2021.3.13021

References

advisories.octopus.com/post/2022/sa2022-07/

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for PRION:CVE-2022-29890