Lucene search
Octopus Server Security Vulnerabilities - CVSS Score 9 - 10
cve
In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive values obfuscated in the deployment logs.
9.8CVSS
9.3AI Score
0.002EPSS
2018-05-21 02:29 PM
25
cve
In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/deleted user were still valid after the access was revoked.
9.8CVSS
9.5AI Score
0.002EPSS
2022-11-01 02:15 AM
24
8
cve
In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes.
9.8CVSS
9.3AI Score
0.002EPSS
2022-09-30 04:15 AM
35
8
cve
In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.
9.1CVSS
9.1AI Score
0.002EPSS
2022-10-27 10:15 AM
26
6