Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-2258 EUVD-2022-34533GHSA-79mw-p7qm-h4wp

In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view thes…

Published Mar 13, 2023 · Updated Feb 27, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2019.1.0 – < unspecified, unspecified – < 2022.3.11098, 2022.4.791 – < unspecified, unspecified – < 2022.4.8463, 2023.1.4189 – < unspecified, unspecified – < 2023.1.9672 unspecified

Advisories 1

References