Skip to content
OpenAdvisories
High · 7.5 CVE-2022-2883 EUVD-2022-35115GHSA-x9cj-w6h9-jcrq

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

Published Feb 22, 2023 · Updated Mar 11, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 0.9 – < unspecified, unspecified – < 2022.3.11043, 2022.4.791 – < unspecified, unspecified – < 2022.4.8401 unspecified

Advisories 1

References