CVE-2022-2075

The CVE-2022-2075 entry concerns Octopus Deploy and a Regex Denial of Service targeting the build information request validation. Affected component/attack: the validation logic used to handle build information requests can be abused via crafted input, causing DoS. CVSS v3.1 base score 7.5 (HIGH)...

CVE-2022-2074

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template...

CVE-2022-2074

CVE-2022-2074 concerns Octopus Deploy, where “affected versions” expose a vulnerability that can cause a Regex Denial of Service via the Variable Project Template . The issue is described across multiple feeds as a DoS risk without definitive CVE-wide exploitation details in some sources, while o...

CVE-2022-2049

CVE-2022-2049 affects Octopus Deploy. The issue enables a Regex Denial of Service via the package upload function; the underlying root cause and affected versions are not detailed in the provided documents. No remediation or exploit details are provided in the connected sources.

CVE-2022-2049

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function...

CVE-2022-1901

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

CVE-2022-1901

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

CVE-2022-1901

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

Code injection

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

CVE-2022-1901

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

CVE-2022-1901

CVE-2022-1901 affects Octopus Deploy. The issue allows unmasking of sensitive variables via the variable preview feature in affected versions. Public details in the provided documents are limited to the vulnerability description and a linked advisory; no explicit exploit paths, impacted versions,...

Octopus Deploy 安全漏洞

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy. An attacker exploited the vulnerability to perform a regular expression denial of service using Variable Project...

PT-2022-14180 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows sensitive variables to be unmasked by utilizing the variable preview feature in affected versions of the software. Recommendations: At the moment, there is no...

PT-2022-14840 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows for a Regex Denial of Service using the Variable Project Template in affected versions of Octopus Deploy. Recommendations: At the moment, there is no information abo...

CVE-2022-2049: Undefined Security Weakness

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function...

PT-2022-14706 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows for a Regex Denial of Service via the package upload function. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-2022-2075: Undefined Security Weakness

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation...

CVE-2022-2074: Undefined Security Weakness

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template...

CVE-2022-1901: Improper Privilege Management

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

Octopus Deploy 信息泄露漏洞

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. An information disclosure vulnerability exists in Octopus Deploy that stems from the exposure of sensitive variables...