TI-2022-01375 CVE-2022-1502 · GHSA-4r7w-cvqp-58f8
Permissions were not properly verified in the API on projects using version control in…
Priority LOW 21
Permissions were not properly verified in the API on projects using version control in Git.
Vulnerabilities
9 records
TI-2021-11814 CVE-2021-31817 · GHSA-cg8q-mvmc-qr6h
Cleartext storage of sensitive information in Octopus Server
Priority LOW 34
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.
TI-2021-11813 CVE-2021-31816 · GHSA-7w22-h336-hrv9
Cleartext storage of sensitive information in Octopus Server
Priority LOW 34
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.
TI-2021-11815 CVE-2021-31818 · GHSA-6jqc-mwfj-6xjc
SQL injection in Octopus Server
Priority LOW 21
Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly.
TI-2021-10722 CVE-2021-30183 · GHSA-x7v8-768q-2m8h
Cleartext storage of sensitive information in multiple versions of Octopus Server where…
Priority LOW 34
Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be wr…
TI-2020-12726 CVE-2020-16197 · GHSA-w4vm-8m9w-5qwm
An issue was discovered in Octopus Deploy 3.4.
Priority LOW 21
An issue was discovered in Octopus Deploy 3.4.
TI-2019-13770 CVE-2019-19085 · GHSA-wj9v-cg6p-qc9f
A persistent cross-site scripting (XSS) vulnerability in Octopus Server 3.4.0 through…
Priority LOW 25
A persistent cross-site scripting (XSS) vulnerability in Octopus Server 3.4.0 through 2019.10.5 allows remote authenticated attackers to inject arbitrary web script or HTML.
TI-2019-11609 CVE-2019-15507 · GHSA-48rh-rw8j-qvqv
In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured…
Priority LOW 30
In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certain limited special-characters circumstances) could trigger a deployment that writes the web request…
TI-2019-11610 CVE-2019-15508 · GHSA-5fjw-573q-gg89
In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an…
Priority LOW 30
In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request p…