Skip to content
OpenAdvisories
Unscored CVE-2022-2074 EUVD-2022-34365GHSA-93fh-49m9-64cj

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template.

Published Aug 19, 2022 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 0.9 – < unspecified, unspecified – < 2022.1.2894, 2022.2.6729 – < unspecified, unspecified – < 2022.2.6872, 2022.3.348 – < unspecified, unspecified – < 2022.3.4953 unspecified

References