Skip to content
OpenAdvisories
Unscored CVE-2022-1502 EUVD-2022-24803GHSA-4r7w-cvqp-58f8

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users w…

Published May 4, 2022 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server < —

References