Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-2760 EUVD-2022-35002GHSA-x537-5w7x-8g44

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an err…

Published Sep 28, 2022 · Updated May 21, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2019.5.7 – < unspecified, unspecified – < 2022.1.3180, 2022.2.6729 – < unspecified, unspecified – < 2022.2.7965, 2022.3.348 – < unspecified, unspecified – < 2022.3.10586 unspecified

References