Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-2416 EUVD-2022-34679GHSA-48r8-6rwx-4hc4

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of a…

Published Aug 2, 2023 · Updated Oct 11, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2019.4.0 – < 2022.4.9997, 2023.1.0 – < 2023.1.10235, 2023.2.0 – < 2023.2.10545 2022.4.9997

Advisories 1

References