Skip to content
OpenAdvisories
Unscored CVE-2022-2783 EUVD-2022-35024GHSA-qxv6-wcr6-hh88

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token

Published Oct 6, 2022 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 3.12.0 – < unspecified, unspecified – < 2022.1.3154, 2022.2.6729 – < unspecified, unspecified – < 2022.2.7897, 2022.3.348 – < unspecified, unspecified – < 2022.3.10586 unspecified

References