Skip to content
OpenAdvisories
Unscored CVE-2022-2528 EUVD-2022-34783GHSA-9qww-9g4v-vq9h

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing …

Published Sep 9, 2022 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 3.0 – < unspecified, unspecified – < 2022.1.3106, 2022.2.6729 – < unspecified, unspecified – < 2022.2.7718, 2022.3.348 – < unspecified, unspecified – < 2022.3.7782 unspecified

References