CVE-2022-1670

creationtimestamp| type| source ---|---|--- 2022-05-19 12:29:19+00:00| seen| https://t.me/cibsecurity/42969...

CVE-2022-1670

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users...