Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-2507 EUVD-2022-34765GHSA-76vv-65xc-fv9q

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage

Published Apr 19, 2023 · Updated Feb 5, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 0.9 – < unspecified, 2022.3.348 – < unspecified, unspecified – < 2022.3.10957, 2022.4.791 – < unspecified, unspecified – < 2022.4.8332, unspecified – < 2023.1.6715 unspecified

Advisories 1

References