Code injection

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does not have access to due to verbose error messaging...

CVE-2022-2508

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does not have access to due to verbose error messaging...

CVE-2022-2508

CVE-2022-2508 affects Octopus Server. Multiple connected sources describe a vulnerability where verbose error messages may reveal the existence of resources in spaces the user should not access, constituting an information disclosure risk. The issue is tied to Octopus Server’s error handling in a...

CVE-2022-2508

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does not have access to due to verbose error messaging...