Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-4008 EUVD-2022-51389GHSA-mc83-5hwv-9c74

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

Published May 10, 2023 · Updated Jan 28, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Tentacle

Description

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Tentacle 0.9 – < unspecified, unspecified – < 2022.3.11043, 2022.4.791 – < unspecified, unspecified – < 2022.4.8401 unspecified

Advisories 1

References