1127 matches found
Code injection
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
CVE-2022-4009
CVE-2022-4009 affects Octopus Deploy; the vulnerability allows a user to introduce code via offline package creation, leading to potential command injection. The provided documents do not specify exact affected versions or a published fix. Additional connected sources mention Octopus Deploy conte...
CVE-2022-4009
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
Octopus Deploy 命令注入漏洞
Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A command injection vulnerability exists in Octopus Deploy, which originates from a user being able to perform command injection by creating offline packages. The...
CVE-2022-4009
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation...
CVE-2022-2259
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
CVE-2022-2259
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
CVE-2022-2258
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
CVE-2022-2258
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
Code injection
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
Code injection
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
CVE-2022-2259
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
CVE-2022-2258
CVE-2022-2258 affects Octopus Deploy: a user can view Tagsets without explicit view permissions, indicating an information disclosure vulnerability. The available sources describe the issue but do not specify affected versions, root cause details, exploit information, or a confirmed fix/version. ...
CVE-2022-2259
CVE-2022-2259 affects Octopus Deploy: authenticated users can view Workerpools without explicit permissions. This entry provides a general description of the issue; no concrete technical details (affected versions, root cause, exploit paths, or fixes) are present in the supplied documents. The ri...
CVE-2022-2258
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
Octopus Deploy 安全漏洞
Octopus Deploy is an automation tool for .NET, Java, and other application development deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy Octopus Server that stems from the possibility of a user viewing a work pool without explicitly assigned permissions...
PT-2023-12707 · Unknown · Octopus Deploy
Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows a user to view Tagsets without having explicit permissions to do so. Recommendations: At the moment, there is no information about a newer version that contains a fi...
CVE-2022-2259
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...
Octopus Deploy 安全漏洞
Octopus Deploy is an automation tool for .NET, Java, and other application development deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy Octopus Server that stems from the possibility of a user viewing a tag set without explicitly assigned permissions...