Code injection

2023-01-0300:15:00

PRIOn knowledge base

www.prio-n.com

octopus deploy

code injection

variable preview

sensitive variables

nvd

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview.

CPENameOperatorVersion
octopus_serverge2022.4
octopus_serverlt2022.4.8063
octopus_serverge2018.1.0
octopus_serverlt2022.3.10750

Name	Operator	Version
octopus_server	ge	2022.4
octopus_server	lt	2022.4.8063
octopus_server	ge	2018.1.0
octopus_server	lt	2022.3.10750

References

advisories.octopus.com/post/2022/sa2022-25/