Octopus Server Security Vulnerabilities and Issues — Octopus Server CVE List

Lucene search

OctopusOctopus Server

3 matches found

CVE•added 2022/09/30 4:15 a.m.•48 views

CVE-2022-2778

In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes.

9.8CVSS9.3AI score0.00055EPSS

CVE•added 2022/09/09 8:15 a.m.•38 views

CVE-2022-2528

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.

6.5CVSS6.5AI score0.00103EPSS

CVE•added 2022/09/28 12:15 p.m.•34 views

CVE-2022-2760

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space.

4.3CVSS4.5AI score0.00305EPSS