Skip to content
OpenAdvisories
Unscored CVE-2022-23184 EUVD-2022-28274GHSA-mcpv-3q7c-v7rr

In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open red…

Published Feb 7, 2022 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server unspecified – < 2021.2.8011, unspecified – < 2021.3.11057 2021.2.8011

References