CVE-2022-2883

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service...

Denial of service

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service...

CVE-2022-2883

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service...

CVE-2022-2883

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service...

PT-2023-12952

Name of the Vulnerable Software and Affected Versions Octopus Deploy affected versions not specified Description The issue allows an attacker to upload a zipbomb file as a task, resulting in Denial of Service. Recommendations At the moment, there is no information about a newer version that...

CVE-2022-2883: Unrestricted Upload of File with Dangerous Type

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service...

CVE-2022-2883

In Octopus Deploy, a vulnerability exists where a zipbomb file can be uploaded as a task, leading to Denial of Service. The impact is a HIGH severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) with network attack vector and no user interaction. The available sources (NVD, Red Hat advisory, C...

Octopus Deploy 代码问题漏洞

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the possibility of uploading a zipbomb file as a task resulting in a denial of service...

CVE-2022-4898

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was take...

CVE-2022-4898

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was take...

Cross site scripting

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was take...

CVE-2022-4898

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was take...

CVE-2022-4898

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was take...

CVE-2022-4898

CVE-2022-4898 affects Octopus Server: the help sidebar could be customized to include a Cross-Site Scripting payload in the support link. The original fix from advisory 2022-07 could be bypassed in certain circumstances, and a different approach was taken to prevent the support link from being su...

PT-2023-15908

Name of the Vulnerable Software and Affected Versions Octopus Server affected versions not specified Description The issue concerns a Cross-Site Scripting XSS payload that can be included in the support link of the help sidebar in affected versions of Octopus Server. Initially, a fix was...

CVE-2022-4898: Improper Neutralization of Input During Web Page Generation

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was take...

Octopus Server 跨站脚本漏洞

Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server. An attacker could exploit the vulnerability to perform cross-site scripting attacks...

CVE-2022-3614

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation...

CVE-2022-3614

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation...

Authentication flaw

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation...