Skip to content
OpenAdvisories
Unscored CVE-2022-29890 EUVD-2022-34201GHSA-vvp4-x27q-hqwj

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.

Published Jul 15, 2022 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2019.7.0 – < unspecified, unspecified – < 2021.3.13021, 2022.1.2121 – < unspecified, unspecified – < 2022.1.2894, 2022.2.6729 – < unspecified, unspecified – < 2022.2.6971, 2022.3.348 – < unspecified, unspecified – < 2022.3.2387 unspecified

References