Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-2782 EUVD-2022-35023GHSA-wvgj-4785-cm7h

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the sessio…

Published Oct 26, 2022 · Updated May 7, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 0.9 – < unspecified, unspecified – < 2022.2.8351, 2022.3.348 – < unspecified, unspecified – < 2022.3.10586, 2022.4.791 – < unspecified, unspecified – < 2022.4.2898 unspecified

References