Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Octopus Server 2022.4.9997, 2023.1.10235, 2023.2.10545 Clear all filters
TI-2022-02231 CVE-2022-2416 · GHSA-48r8-6rwx-4hc4

Server-side request forgery in Octopus Server

Priority LOW 25

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00299 Published 2023-08-02 Fixed in 2022.4.9997, 2023.1.10235 +1 CWE-918