Show filters
111 Total Results
Displaying 21-30 of 111
Sort by:
Attacker Value
Unknown
CVE-2022-2346
Disclosure Date: August 02, 2023 (last updated October 08, 2023)
In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints.
0
Attacker Value
Unknown
CVE-2022-4870
Disclosure Date: May 18, 2023 (last updated October 08, 2023)
In affected versions of Octopus Deploy it is possible to discover network details via error message
0
Attacker Value
Unknown
CVE-2022-4008
Disclosure Date: May 10, 2023 (last updated October 08, 2023)
In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service
0
Attacker Value
Unknown
CVE-2023-2247
Disclosure Date: May 02, 2023 (last updated December 14, 2023)
In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function
0
Attacker Value
Unknown
CVE-2022-2507
Disclosure Date: April 19, 2023 (last updated October 08, 2023)
In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage
0
Attacker Value
Unknown
CVE-2022-4009
Disclosure Date: March 16, 2023 (last updated October 08, 2023)
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation
0
Attacker Value
Unknown
CVE-2022-2259
Disclosure Date: March 13, 2023 (last updated October 08, 2023)
In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items
0
Attacker Value
Unknown
CVE-2022-2258
Disclosure Date: March 13, 2023 (last updated October 08, 2023)
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items
0
Attacker Value
Unknown
CVE-2022-2883
Disclosure Date: February 22, 2023 (last updated October 08, 2023)
In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service
0
Attacker Value
Unknown
CVE-2022-4898
Disclosure Date: January 31, 2023 (last updated October 08, 2023)
In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was taken to prevent the possibility of the support link being susceptible to XSS
0
