Description
When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server | 0.9 – < unspecified, unspecified – < 2021.3.12533, 2022.1.0 – < unspecified, unspecified – < 2022.1.53 | unspecified |