Vulnerabilities

TI-2022-01922 CVE-2022-2075 · GHSA-657p-3992-5r6w

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of…

LOW 34

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00784 Published 2022-08-19 Fixed in 2022.1.2894, 2022.2.6872 +1

TI-2022-01921 CVE-2022-2074 · GHSA-93fh-49m9-64cj

LOW 35

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00893 Published 2022-08-19 Fixed in 2022.1.2894, 2022.2.6872 +1

TI-2022-01898 CVE-2022-2049 · GHSA-f4qw-cw72-rr2p

LOW 34

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00784 Published 2022-08-19 Fixed in 2022.1.2894, 2022.2.6872 +1