341 matches found
CVE-2022-2783
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...
CVE-2022-2781
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
CVE-2022-2781
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
CVE-2022-2783
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...
Cross site request forgery (csrf)
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...
CVE-2022-2781
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
CVE-2022-2783
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...
Design/Logic Flaw
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
CVE-2022-2783
CVE-2022-2783 affects Octopus Server. A session cookie can be used as a CSRF token, exposing CSRF risk (CVSS v3.1: 5.3, Network vector, Low integrity impact). Multiple sources (NVD, Red Hat, CVE CVE, CVE listing) corroborate; exploitation details are not provided in the connected documents. Red H...
PT-2022-18618 · Unknown · Octopus Server
Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: A security issue was identified in Octopus Server where a session cookie could be used as the CSRF token. Recommendations: At the moment, there is no information about a newer versio...
CVE-2022-2781
CVE-2022-2781 involves Octopus Server where the same encryption process is used for both session cookies and variables. The core issue is a shared encryption mechanism between two different data types, exposing potential confidentiality concerns. The CVSS v3.1 metrics indicate Network access, Low...
PT-2022-18604 · Unknown · Octopus Server
Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue arises from the use of the same encryption process for both session cookies and variables in affected versions of the software. Recommendations: At the moment, there is no...
Octopus Server 跨站请求伪造漏洞
Octopus Server is an automated deployment platform. A cross-site request forgery vulnerability exists in Octopus Server, which stems from the fact that its session cookie can be used as a cross-site request forgery token...
Octopus Server 加密问题漏洞
Octopus Server is an automated deployment platform. Octopus Server has a cryptographic issue vulnerability that stems from the fact that it uses the same encryption process for encrypting session cookies and variables...
CVE-2022-2783
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...
CVE-2022-2781
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
CVE-2022-29890
In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link...
CVE-2022-1881
In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space...